Amazon ECR Operations: Difference between revisions
Jump to navigation
Jump to search
| Line 17: | Line 17: | ||
=Configure Permissions= | =Configure Permissions= | ||
An external user needs permissions to interact with a repository | An external user needs permissions to interact with a repository: push or pull images. To configure permissions: | ||
Select the repository in question -> Left Tab: Permissions -> Edit | Select the repository in question -> Left Tab: Permissions -> Edit | ||
Statement Name: "122226676707 | Statement Name: "122226676707 and 122226676707 General Access" | ||
Effect: Allow | Effect: Allow | ||
Revision as of 20:47, 6 February 2019
External
Internal
Create Repository
AWS Console: ECR -> Repositories
Create Repository
Repository name: 673499572719.dkr.ecr.us-west-2.amazonaws.com/<namespace>/<repository-name>
Example: 673499572719.dkr.ecr.us-west-2.amazonaws.com/com.uplift/playground/themyscira
Configure Permissions
An external user needs permissions to interact with a repository: push or pull images. To configure permissions:
Select the repository in question -> Left Tab: Permissions -> Edit
Statement Name: "122226676707 and 122226676707 General Access"
Effect: Allow
Principal: Everyone or AWS Account IDs (comma delimited list)
Actions:
ecr:BatchCheckLayerAvailability ecr:BatchGetImage ecr:CompleteLayerUpload ecr:DescribeImages ecr:DescribeRepositories ecr:GetDownloadUrlForLayer ecr:InitiateLayerUpload ecr:ListImages ecr:PutImage ecr:UploadLayerPart
If the following error occurs:
error parsing HTTP 403 response body: unexpected end of JSON input: "" docker push failed
it means "ecr:BatchCheckLayerAvailability" is missing.