Access ECR from EC2In IAM, create a role with the policy AmazonEC2ContainerRegistryReadOnly Add it to the EC2 instance