resource "aws_ecr_registry_policy" "replication_access_cross_account" {
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid    = "ReplicationAccessCrossAccount"
        Effect = "Allow"
        Principal = {
          AWS = "arn:aws:iam::718729873097:root"
        }
        Action = [
          "ecr:ReplicateImage"
        ]
        Resource = [
          "arn:aws:ecr:eu-central-1:799833541840:repository/*"
        ]
      }
    ]
  })
}