Allow other AWS Accounts to pull images from ECR

cross_account_ecr_pull.txt

Account A needs to pull images on Account B:

On Account A:
* Create a role in Account A
* Add policy which as ECR read access

On Account B:
* Create ECR Repository
* Add policy to the ECR Repository as below under permissions and replace <AccountA_ID>
{
  "Version": "2008-10-17",
  "Statement": [
    {
      "Sid": "AllowPull",
      "Effect": "Allow",
      "Principal": {
        "AWS": [
          "arn:aws:iam::<AccountA_ID>:root"
        ]
      },
      "Action": [
        "ecr:BatchCheckLayerAvailability",
        "ecr:BatchGetImage",
        "ecr:DescribeRepositories",
        "ecr:GetAuthorizationToken",
        "ecr:GetDownloadUrlForLayer",
        "ecr:GetRepositoryPolicy",
        "ecr:InitiateLayerUpload",
        "ecr:ListImages"
      ]
    }
  ]
}