[bug] Cannot pull images from sagemaker-tritonserver

[andrewvdm]

Checklist

• I've prepended issue tag with type of change: [bug]
• (If applicable) I've attached the script to reproduce the bug
• (If applicable) I've documented below the DLC image/dockerfile this relates to
• (If applicable) I've documented below the tests I've run on the DLC image
• I'm using an existing DLC image listed here: https://docs.aws.amazon.com/deep-learning-containers/latest/devguide/deep-learning-containers-images.html

Concise Description:

I get the following error messages when trying to pull this image 007439368137.dkr.ecr.eu-west-2.amazonaws.com/sagemaker-tritonserver:25.09-py3.

From SageMaker console when creating a model:

ValidationException
The repository of your image 007439368137.dkr.ecr.eu-west-2.amazonaws.com/sagemaker-tritonserver:25.09-py3 does not grant ecr:GetDownloadUrlForLayer, ecr:BatchGetImage, ecr:BatchCheckLayerAvailability permission to sagemaker.amazonaws.com service principal.

Using docker:

aws ecr get-login-password --region eu-west-2 | docker login --username AWS --password-stdin 007439368137.dkr.ecr.eu-west-2.amazonaws.com

Login Succeeded

docker pull 007439368137.dkr.ecr.eu-west-2.amazonaws.com/sagemaker-tritonserver:25.09-py3
Error response from daemon: unknown: failed to resolve reference "007439368137.dkr.ecr.eu-west-2.amazonaws.com/sagemaker-tritonserver:25.09-py3": unexpected status from HEAD request to https://007439368137.dkr.ecr.eu-west-2.amazonaws.com/v2/sagemaker-tritonserver/manifests/25.09-py3: 403 Forbidden

Expected behavior:
Pull the image successfully.