Can someone please guide me on how to debug this issue? I already set this permission on ECR but I keep getting an error:
The role ‘arn:aws:iam::528343733368:role/sagemaker-202102234444444440000001’ does not have BatchGetImage permission for the image: ‘127333333333.dkr.ecr.eu-west-1.amazonaws.com/sagemaker-demo’.
Permission I set on ECR.
{
"Version": "2008-10-17",
"Statement": [
{
"Sid": "new statement",
"Effect": "Allow",
"Principal": {
"AWS": [
"arn:aws:iam::528343733368:role/sagemaker-202102234444444440000001"
]
},
"Action": [
"ecr:BatchCheckLayerAvailability",
"ecr:BatchDeleteImage",
"ecr:BatchGetImage",
"ecr:CompleteLayerUpload",
"ecr:DescribeImages",
"ecr:DescribeRepositories",
"ecr:GetDownloadUrlForLayer",
"ecr:GetRepositoryPolicy",
"ecr:InitiateLayerUpload",
"ecr:ListImages",
"ecr:PutImage",
"ecr:UploadLayerPart"
]
}
]
}