This is the scenario:
I got one docker image in a central account's ECR in Amazon AWS that I wish to use that in multiple sub-accounts CodePipeline builds as the build environment, is there a way I can grant the CodeBuild service on these accounts access to this private ECR repository and images using IAM permissions?