aws-ecr-repository-policy-config
Repository policy JSON is customer-authored and can contain sensitive condition values.
Where it sits
| location | GetRepositoryPolicy.policyText |
|---|---|
| location kind | policy_document |
| data kinds | credential sensitive_data |
| emits edge | ContainsSecret |
| service | ECR (aws:ecr) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetRepositoryPolicy |
| response path | policyText |
| encoding | json |
| params | {"repositoryName": "\u003crepository\u003e"} |
Required permissions
ecr:GetRepositoryPolicy