Amazon Elastic Container Registry (ECR) is a fully managed AWS container registry for storing, managing, and deploying Docker images. It gives a containerized application a remote home that deployment systems can access. section 7.4
A practical image-publishing workflow uses these steps:
- Create an ECR repository with the AWS CLI or AWS Management Console. section 7.4
- Tag the local Docker image with the ECR repository URL and an image tag such as latest or a semantic version. section 7.4
- Authenticate Docker by piping aws ecr get-login-password into docker login. section 7.4
- Push the tagged image to ECR, then use it from a deployment target. section 7.4
Using ECR with EKS
A Kubernetes deployment initially referencing itam:latest must instead reference the full ECR image URL. EKS also needs IAM permissions to pull image layers and manifests. After the pod starts, a Kubernetes Service can expose it externally through a load balancer. section 7.5
