what iam policies are requried to run ecr commands on ec2 instance that has assumed a role? what iam policies are requried to run ecr commands on ec2 instance that has assumed a role? jenkins jenkins