amazon-web-services - 将帐户 ID 添加到 ECR 映像存储库权限

Question

使用 aws CLI，我试图找到一种将帐户 ID 添加到 ecr 映像存储库权限的方法，而无需重写整个 json。是否有捷径可寻？

{
  "Version": "2008-10-17",
  "Statement": [
    {
      "Sid": "AllowCrossAccountPull",
      "Effect": "Allow",
      "Principal": {
        "AWS": [
          "arn:aws:iam::111:root",
          "arn:aws:iam::222:root",
          "arn:aws:iam::333:root",
          "arn:aws:iam::444:root",
          "arn:aws:iam::<ADD_NEW_ACCOUNT_HERE>:root",
        ]
      },
      "Action": [
        "ecr:BatchCheckLayerAvailability",
        "ecr:BatchGetImage",
        "ecr:DescribeImageScanFindings",
        "ecr:DescribeImages",
        "ecr:DescribeRepositories",
        "ecr:GetAuthorizationToken",
        "ecr:GetDownloadUrlForLayer",
        "ecr:GetLifecyclePolicy",
        "ecr:GetLifecyclePolicyPreview",
        "ecr:GetRepositoryPolicy",
        "ecr:ListImages",
        "ecr:ListTagsForResource"
      ]
    }
  ]
}

标签： amazon-web-services