AWS restrict specific ECR images to specific IAM users?

I'm running a Docker host based on AWS Lightsail targeted individuals for hosting their spare time smaller scale projects.

I'd love to also offer Docker image hosting via AWS ECR, but obviously I wouldn't want one customer's images to be accessible by another customer.

I'd like to use one AWS account for hosting everything on, so that my customers won't need to create an AWS account to get started.

Is that possible somehow? Can I create individual IAM users which only have read and write access to specific images?

Upvotes: 1

Views: 832

Answers (1)

John Hanley
John Hanley

Reputation: 81414

One solution is to use different repositories and policies for each user.

Amazon ECR Repository Policies

Upvotes: 2

Related Questions