policy:
  Version: '2008-10-17'
  Statement:
    - Sid: new statement
      Effect: Allow
      Principal: "*"
      Action:
        - ecr:GetDownloadUrlForLayer
        - ecr:BatchGetImage
        - ecr:BatchCheckLayerAvailability