AWS Stuff

Minimal ECR Pull user

{
  "Resources": {
  "MyECRRepositoryPullUser": {
      "Type": "AWS::IAM::User",
      "Properties": {
        "Policies": [
          {
            "PolicyName": "MyECRRepositoryPullUserPolicy",
            "PolicyDocument": {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": [
                    "ecr:GetDownloadUrlForLayer",
                    "ecr:BatchGetImage",
                    "ecr:BatchCheckLayerAvailability"
                  ],
                  "Resource": "arn:aws:ecr:eu-west-1:NNNNNNNN:repository/my-repository/*"
                },
                {
                  "Effect": "Allow",
                  "Action": "ecr:GetAuthorizationToken",
                  "Resource": "*"
                }
              ]
            }
          }
        ],
        "UserName": "MyECRRepositoryPullUser"
      }
    }
  }
}