Understanding ECR
Before we get started creating and configuring ECR repositories, it is important to provide a brief introduction to the core concepts of ECR.
ECR is a fully-managed private Docker registry provided by AWS and offers tight integration with ECS and other AWS services. ECR consists of a number of components, as shown in the following diagram:
ECR architecture
The core components of ECR include:
- Repositories: A repository stores all versions of images for a given Docker image. Each repository is configured with a name and URI, which is unique to your AWS account and region.
- Permissions: Each repository includes permissions that allow you to grant access for various ECR operations, such as pushing or pulling Docker images.
- Lifecycle policy: Each repository can be configured with an optional lifecycle policy, which can be used to clean up orphaned Docker images that have been superseded by newer versions, or remove older Docker images that you may no longer use.
- Authentication...