AWS Certified CloudOps Engineer - Associate
Container Images and Amazon ECR
How container images are layered and addressed by digest, how ECR authentication and its three permission layers work, and how tag immutability, basic and enhanced scanning, lifecycle policies, replication, and pull through cache keep a registry usable in production.
Intermediate 25 minutes 6 Learning Objectives
- Explain how container image layers, manifests, tags, and digests relate to each other
- Authenticate Docker to an ECR private registry and describe how long the credential lasts
- Distinguish IAM identity policies, repository policies, and registry policies in ECR
- Compare ECR basic scanning with enhanced scanning and pick the right one for a requirement
- Write an ECR lifecycle policy and predict which images it will expire
- Choose between registry replication and a pull through cache rule for a given goal