Containers: Reader policies
Container orchestration, registries and managed container platforms.
8 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (6)
- AmazonEC2ContainerRegistryReadOnlyReader
Provides read-only access to Amazon EC2 Container Registry repositories.
- AmazonEKSFargatePodExecutionRolePolicyReader
Provides access to other AWS service resources that are required to run Amazon EKS pods on AWS Fargate
- AmazonEKSWorkerNodeMinimalPolicyReader
This policy allows Amazon EKS worker nodes to connect to Amazon EKS Clusters.
- AmazonElasticContainerRegistryPublicReadOnlyReader
Provides read-only access to Amazon ECR Public repositories.
- AWSAppRunnerReadOnlyAccessReader
Grants permissions to list and view details about App Runner resources.
- AWSProtonReadOnlyAccessReader
Provides read only access to the AWS Proton APIs and Management Console.
Service roles (2)
- AWSAppRunnerServicePolicyForECRAccessReader
AWS App Runner service policy that grants read permissions to Amazon ECR resources in the customer's account. Use it in a role that is passed to App Runner when creating or updating an App Runner service.
- ROSAWorkerInstancePolicyReader
Allows Red Hat OpenShift Service on AWS (ROSA) worker nodes in your account read-only access to Amazon EC2 instances and AWS Regions for compute node lifecycle management.
Also relevant to Containers (3)
- AmazonEKSDashboardConsoleReadOnlyReader
Provides read only access to view the dashboard in the Amazon EKS console. The dashboard aggregates information about multiple clusters and related resources using AWS Organizations.
- AmazonEKSWorkerNodePolicyReader
This policy allows Amazon EKS worker nodes to connect to Amazon EKS Clusters.
- CloudWatchAutomaticDashboardsAccessReader
Provides access to the non-CloudWatch APIs used to display CloudWatch Automatic Dashboards, including the contents of objects such as Lambda functions