No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

hey! Just to make sure I'm understanding
you have account A with an ECS cluster and task
and then account B with an ECR repository where you want to pull images from right?

Hey Jim, looks like this question is more about AWS rather than Pulumi?

I haven’t tried this solution but it might work:
<https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html>

```{
    "Version": "2008-10-17",
    "Statement": [
        {
            "Sid": "AllowCrossAccountPush",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::account-id:root"
            },
            "Action": [
                "ecr:GetDownloadUrlForLayer",
                "ecr:BatchCheckLayerAvailability",
                "ecr:PutImage",
                "ecr:InitiateLayerUpload",
                "ecr:UploadLayerPart",
                "ecr:CompleteLayerUpload"
            ]
        }
    ]
}```


whats not clear is it looks like you can set the resource policy on the repository, but you can also set on the registry