Amazon ECR (formerly EC2 Container Registry) provides a private Docker registry service. Images can be published to ECR repositories, to which access is managed with IAM controls.

Repository names are comprised of an optional namespace and a name. The repository URL will be an auto-generated series of numbers under


  • Repositories house the container images, and can be either public or private.
  • Each account's Registry hosts public repositories.
  • Images can be pushed to and pulled from your repositories for use both inside and outside of AWS.
  • Repository Policies provide access control for your repositories.
  • The ECR Public Gallery makes public registries accessible to other customers.


To push images or pull images from a private repository, first get the login command from the CLI and eval it:

eval $(aws ecr get-login)

These credentials are temporary and last 12 hours.