Amazon ECR (Elastic Container Registry)

Reference: AWS docsarrow-up-right

What is Amazon Elastic Container Registry?

  • Amazon ECR (Elastic Container Registry) is a secure, scalable, and reliable Fully-managed Docker Container Image Registry Service

  • ECR provides resource-based permissions using AWS IAM

    • How?

      • Only specific users or EC2 instances can access ECR repositories and images

  • Developers can use their preferred CLI to push, pull, and manage Docker images, OCI (Open Container Initiative) images, and OCI-compatible artifacts

Components of Amazon ECR

Registry

  • Amazon ECR Registry can be created for each account, and you can create image repositories within the registry to store images

Authorization token

  • Only authenticated AWS users can Push / Pull images to/from Amazon ECR registry

Repository

  • You can store Docker images in Amazon ECR image repositories

Repository policy

  • You can manage access permissions to repositories and images through repository policies

Image

  • You can Push / Pull container images to/from repositories

Features of Amazon ECR

  • You can manage the lifecycle of images in repositories using Lifecycle policies

    • You can create policies to remove unused images

  • You can use Image scanning to help identify software vulnerabilities in images

Last updated