What is the permission for a IAM user to create a ECR repository?

My IAM user is getting this error

User: arn:aws:iam::123456789:user/admin is not authorized to perform: 
ecr:CreateRepository on resource: *

when I try to create a repository.

I have already grant AmazonEC2ContainerServiceFullAccess to the group this user belongs to. I search for repository in 'attach policy' but there is no match. How can I grant the permission to this user?

I got this error some time back, notice that you have given "containerservicefullaccess" and not "ContainerRegistryFullAccess"

ECR has its own IAM policies, so you need to give your user additional permissions for it Here you can find documentation about ECR policies

The required permission is AmazonEC2ContainerRegistryFullAccess