ECR
Amazon ECR (formerly EC2 Container Registry) provides a private Docker registry service. Images can be published to ECR repositories, to which access is managed with IAM controls.
Repository names are comprised of an optional namespace and a name. The repository URL will be an auto-generated series of numbers under .dkr.ecr.region.amazonaws.com.
Concepts
- Repositories house the container images, and can be either public or private.
- Each account's Registry hosts public repositories.
- Images can be pushed to and pulled from your repositories for use both inside and outside of AWS.
- Repository Policies provide access control for your repositories.
- The ECR Public Gallery makes public registries accessible to other customers.
Authentication
To push images or pull images from a private repository, first get the login command from the CLI and eval it:
eval $(aws ecr get-login)
These credentials are temporary and last 12 hours.
Backlinks