Amazon Elastic Container Registry (ECR)

Elastic Container Registry (ECR), available since December 2015 with tagging support from December 2018

• https://aws.amazon.com/ecr/

Features:

• Open Container Initiative (OCI) artifacts support
• Security image scanning, ScanOnPush
  • Basic: Clair project
  • Advanced: Amazon Inspector
    • Operating systems and programing language package vulnerabilities
    • Continuous scanning option

Errors

• Terraform: Error: error creating ECR repository: InvalidParameterException: Invalid parameter at 'repositoryName' failed to satisfy constraint:

Related

• JFrog Container Registry
• Terraform resource: aws_ecr_repository
• Amazon Inspector (Oct 2015)
• AWS ECS
• https://public.ecr.aws/
• public.ecr.aws
• Terraform resource: aws_ecr_repository_policy
• Azure Container Registry (ACR)

• ecr:ListImages
• ecr:GetDownloadUrlForLayer
• ecr:DescribeImages
• ecr:BatchGetImage
• ecr:BatchCheckLayerAvailability

Activities

• Pushing a Helm chart to ECR
• Private repository policies in Amazon ECR

Announcements

• Oct 2019 Native Container Image Scanning in Amazon ECR https://aws.amazon.com/blogs/containers/amazon-ecr-native-container-image-scanning/

See also

• Terraform AWS ECR: aws_ecr_repository, aws_ecr_repository_policy, aws_ecrpublic_repository, aws_ecrpublic_repository_policy, aws_ecr_registry_policy, aws_ecr_registry_scanning_configuration, aws_ecr_replication_configuration
• ECR, aws ecr, public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning
• Container Registry: JFrog Container Registry, AWS ECR, Azure container registry, VMware Harbor Registry, Google Cloud Registry, Amazon Elastic Container Registry (ECR), GitLab container registry, crane, gcr.io, ghcr.io

https://aws.amazon.com/blogs/aws/ec2-container-registry-now-generally-available/

https://aws.amazon.com/about-aws/whats-new/2018/12/amazon-ecr-now-allows-repository-tagging/

https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html