Amazon ECR Operations: Difference between revisions
Jump to navigation
Jump to search
| Line 12: | Line 12: | ||
Example: 673499572719.dkr.ecr.us-west-2.amazonaws.com/com.uplift/playground/themyscira | Example: 673499572719.dkr.ecr.us-west-2.amazonaws.com/com.uplift/playground/themyscira | ||
=Configure Permissions= | |||
An external user needs permissions to interact with a repository (for example to push images). To configure permissions: | |||
Select the repository in question -> Left Tab: Permissions -> Edit | |||
Statement Name: "122226676707 can push and pull" | |||
Effect: Allow | |||
Principal: AWS Account IDs (comma delimited list) | |||
Actions: | |||
ecr:CompleteLayerUpload | |||
ecr:DescribeImages | |||
ecr:InitiateLayerUpload | |||
ecr:ListImages | |||
ecr:PutImage | |||
ecr:CompleteLayerUpload | |||
Revision as of 09:54, 6 February 2019
Internal
Create Repository
AWS Console: ECR -> Repositories
Create Repository
Repository name: 673499572719.dkr.ecr.us-west-2.amazonaws.com/<namespace>/<repository-name>
Example: 673499572719.dkr.ecr.us-west-2.amazonaws.com/com.uplift/playground/themyscira
Configure Permissions
An external user needs permissions to interact with a repository (for example to push images). To configure permissions:
Select the repository in question -> Left Tab: Permissions -> Edit
Statement Name: "122226676707 can push and pull"
Effect: Allow
Principal: AWS Account IDs (comma delimited list)
Actions:
ecr:CompleteLayerUpload ecr:DescribeImages ecr:InitiateLayerUpload ecr:ListImages ecr:PutImage ecr:CompleteLayerUpload