2 Answers
- Newest
- Most votes
- Most comments
1
I think ECR is not supported in RCP even though documentation suggests it is. Maybe it's a plan for the future. I tried to create the RCP for ECR but ECR is not even listed in the Actions and the JSON for RCP complains.
1
Resource Control Policies (RCPs) currently apply to actions for a specific set of AWS services. According to the most recent documentation, RCPs support:
- Amazon S3
- AWS Security Token Service
- AWS Key Management Service
- Amazon SQS
- AWS Secrets Manager
- Amazon Cognito user pools
- Amazon Elastic Container Registry
- Amazon OpenSearch Serverless
If you're experiencing an issue where the system indicates that Amazon ECR is not supported when you try to apply an RCP, there could be a few possible explanations:
- There might be a phased rollout of ECR support across different AWS regions
- The feature might be very recently added and there could be a delay in its availability
- There could be a specific limitation or requirement for using RCPs with ECR that needs to be addressed
To resolve this issue, I would recommend:
- Verifying that you're using AWS Organizations with the "all features" option enabled (not just "Consolidated billing features")
- Checking that RCPs are properly enabled in your organization
- Contacting AWS Support for the most up-to-date information on ECR support with RCPs
Sources
Resource control policies (RCPs) - AWS Organizations
Introducing resource control policies (RCPs), a new type of authorization policy in AWS Organizations | AWS News Blog
Relevant content
asked a year ago

this what I get from the console