TLDR; The list of required permissions is as follows:
These include BatchCheckLayerAvailability, GetAuthorizationToken,
CompleteLayerUpload, InitiateLayerUpload, PutImage, and UploadLayerPart.
This is the role's detail in JSON format.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"ecr:CompleteLayerUpload",
"ecr:UploadLayerPart",
"ecr:Initiate