AWS AmazonECR documentation change
Summary
Added note about required ecr:GetAuthorizationToken IAM permission for registry authentication
Security assessment
Documents security-related permission requirement but doesn't indicate response to a specific security incident or vulnerability
Diff
diff --git a/AmazonECR/latest/userguide/getting-started-cli.md b/AmazonECR/latest/userguide/getting-started-cli.md index 4b45cae7c..1b34d590c 100644 --- a//AmazonECR/latest/userguide/getting-started-cli.md +++ b//AmazonECR/latest/userguide/getting-started-cli.md @@ -157,0 +158,4 @@ After you have installed and configured the AWS CLI, authenticate the Docker CLI +###### Note + +Your IAM principal must have the `ecr:GetAuthorizationToken` permission to authenticate to a registry. For more information, see [AWS managed policies for Amazon Elastic Container Registry](./security-iam-awsmanpol.html). +