Amazon Elastic Container Registry

Private OCI image registry with IAM permissions, AES-256 encryption and vulnerability scanning.

Provider: aws
Kind: Container registry
Category: Data
Official docs: https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html
Also known as: ECR

Properties · 6 set by this component

property	type	values	required	kind default	this component
encryptionType · component property	enum	aes-256 \| kms \| dsse-kms	no	aes-256	inherited
geoReplicated	boolean	—	no	false	▸ false
imageScanning	boolean	—	no	—	▸ false
immutableTags	boolean	—	no	—	▸ false
managed	boolean	—	no	false	▸ true
pullThroughCache · component property	boolean	—	no	false	inherited
retentionDays	integer	—	no	—	inherited
scanningType · component property	enum	basic \| enhanced	no	basic	inherited
staticCredentials	boolean	—	no	—	▸ false
visibility	enum	private \| public	no	—	▸ private

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "ecr", component: "aws-ecr" }

Other Container registry products · 14

Container Registryalibaba-container-registryalibabacloudcontainer-registry Amazon Elastic Container Registry Publicaws-ecr-publicawscontainer-registry Azure Container Registryazure-container-registryazurecontainer-registry Generic container registrycontainer-registrycontainer-registry Docker Hubdocker-hubcontainer-registry CNCF Distributiondocker-registrycontainer-registry GitLab Container Registrygitlab-registrycontainer-registry Harborharborcontainer-registry Red Hat Quayquaycontainer-registry zotzotcontainer-registry DigitalOcean Container Registrydigitalocean-container-registrydigitaloceancontainer-registry Artifact Registrygoogle-artifact-registrygcpcontainer-registry IBM Cloud Container Registryibm-container-registryibmcontainer-registry OCI Container Registryoci-container-registryocicontainer-registry

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Amazon ECR private registry: managed OCI image registry with IAM resource-based permissions
3# ("What is Amazon Elastic Container Registry?"). "Encryption at rest": repositories are encrypted with
4# S3-managed AES-256 by default; repositories are created mutable and scanning must be configured.
5schemaVersion: "1"
6type: "component"
7id: "aws-ecr"
8kind: "container-registry"
9provider: "aws"
10docs: "https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html"
11aliases: ["ECR"]
12defaults:
13  managed: true
14  visibility: "private"
15  geoReplicated: false
16  immutableTags: false
17  imageScanning: false
18  staticCredentials: false
19properties:
20  encryptionType:
21    type: "enum"
22    values: ["aes-256", "kms", "dsse-kms"]
23    default: "aes-256"
24  scanningType:
25    type: "enum"
26    values: ["basic", "enhanced"]
27    default: "basic"
28  pullThroughCache:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/aws-ecr.md