Version: 0.0.25

Table: repository_policy

Table to manage AWS ECR private repository policies. Amazon ECR uses resource-based permissions to control access to repositories. Resource-based permissions let you specify which IAM users or roles have access to a repository and what actions they can perform on it.

By default, only the AWS account that created the repository has access to a repository. You can apply a policy document that allow additional permissions to your repository.

Example

INSERT INTO repository_policy (repository_id, policy_text) VALUES
((select id from repository where repository_name = 'repository'),
'{ "Version": "2012-10-17", "Statement": [ { "Sid": "DenyPull", "Effect": "Deny", "Principal": "*", "Action": [ "ecr:BatchGetImage", "ecr:GetDownloadUrlForLayer" ] } ]}');

SELECT * FROM repository_policy WHERE repository_id = (select id from repository where repository_name = 'repository');

DELETE FROM repository_policy WHERE repository_id = (select id from repository where repository_name = 'repository');

See

Columns

• Optional policy_text: string

Text containing the policy for that repository

See

https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html

• region: string

Reference to the associated region

• Optional registry_id: string

Registry that is associated to the policy

• repository: repository

Reference to the repository that is associated to the policy

Columns​

Columns