Amazon ECR (Elastic Container Registry)

Reference: AWS docs

What is Amazon Elastic Container Registry?

• Amazon ECR (Elastic Container Registry) is a secure, scalable, and reliable Fully-managed Docker Container Image Registry Service

• ECR provides resource-based permissions using AWS IAM

  • How?

    • Only specific users or EC2 instances can access ECR repositories and images

• Developers can use their preferred CLI to push, pull, and manage Docker images, OCI (Open Container Initiative) images, and OCI-compatible artifacts

Components of Amazon ECR

Registry

• Amazon ECR Registry can be created for each account, and you can create image repositories within the registry to store images

Authorization token

• Only authenticated AWS users can Push / Pull images to/from Amazon ECR registry

Repository

• You can store Docker images in Amazon ECR image repositories

Repository policy

• You can manage access permissions to repositories and images through repository policies

Image

• You can Push / Pull container images to/from repositories

Features of Amazon ECR

• You can manage the lifecycle of images in repositories using Lifecycle policies

  • You can create policies to remove unused images

• You can use Image scanning to help identify software vulnerabilities in images