[ "arn:aws:s3:::codebuild-regionId-accountId-bucket", "arn:aws:s3:::codebuild-regionId-accountId-bucket/*", "arn:aws:s3:::aws-m2-repo-*" ], "Effect": "Allow" }, { "Action": [ "ecr:GetAuthorizationToken", "ecr:BatchCheckLayerAvailability", "ecr:BatchGetImage", "ecr:Get...