AWSTemplateFormatVersion: "2010-09-09" Parameters: RepositoryName: Type: String Default: blog-deployment Resources: # ECR Repository Repository: Type: AWS::ECR::Repository DeletionPolicy: Retain Properties: RepositoryName: !Ref RepositoryName ImageScanningConfiguration: ScanOnPush: true RepositoryPolicyText: Version: "2012-10-17" Statement: - Sid: AllowLambdaPullImage Effect: Allow Principal: Service: lambda.amazonaws.com Action: - ecr:BatchGetImage - ecr:BatchCheckLayerAvailability - ecr:GetDownloadUrlForLayer Outputs: RepositoryUri: Description: URI of the ECR repository Value: !GetAtt Repository.RepositoryUri Export: Name: BlogDeployment-RepositoryUri