AWS ECR Docker Push and Pull Commands

by

Amazon Web Services (AWS) Elastic Container Registry (ECR) is a fully-managed Docker container registry that simplifies the process of storing, managing, and deploying Docker container images. Using AWS ECR, developers and IT teams can easily integrate containerized applications into their workflows. This guide will provide a step-by-step tutorial on how to use the Docker commands to push and pull images to and from AWS ECR.

Prerequisites

Before you begin, ensure you have the following in place:

  1. AWS CLI: Install and configure the AWS Command Line Interface (CLI) on your machine. For installation instructions, visit AWS CLI Installation Guide.
  2. Docker: Ensure Docker is installed on your machine. Check the Docker Installation Guide for instructions.
  3. IAM Permissions: Ensure your IAM user/role has the necessary permissions for ECR. The required permissions include ecr:CreateRepository, ecr:DescribeRepositories, ecr:PutImage, ecr:InitiateLayerUpload, ecr:UploadLayerPart, ecr:CompleteLayerUpload, and ecr:BatchGetImage.

Step 1: Authenticating Docker to Your ECR

Before pushing or pulling images, you need to authenticate Docker to your Amazon ECR registry:

  1. Open your terminal and run the following command to get login credentials: 
    aws ecr get-login-password --region <your-region> | docker login --username AWS --password-stdin <account-id>.dkr.ecr.<your-region>.amazonaws.com

    Replace <your-region> with your desired AWS region (e.g., us-west-2) and <account-id> with your AWS Account ID.

    If successful, you’ll see a message saying Login Succeeded.

Step 2: Creating an ECR Repository

If you don’t have a repository created in ECR, you can do so via the AWS CLI:

aws ecr create-repository --repository-name <your-repo-name> --region <your-region>

Replace <your-repo-name> with a name for your repository.

Step 3: Building Your Docker Image

If you don’t have a Docker image ready, you can create one using the following command. Navigate to your project directory where your Dockerfile is located, and run:

docker build -t <your-repo-name>:<tag> .

Replace <tag> with a version or label, such as latest.

Step 4: Tagging Your Docker Image

Before pushing the image to ECR, you need to tag it to match your repository URI:

docker tag <your-repo-name>:<tag> <account-id>.dkr.ecr.<your-region>.amazonaws.com/<your-repo-name>:<tag>

Step 5: Pushing Your Docker Image to ECR

Now, you can push your Docker image to your ECR repository using the following command:

docker push <account-id>.dkr.ecr.<your-region>.amazonaws.com/<your-repo-name>:<tag>

After executing this command, Docker will upload your image layers to ECR. Once complete, you will see a success message.

Step 6: Pulling Your Docker Image from ECR

To pull an image from your ECR repository to your local machine, use the following command:

docker pull <account-id>.dkr.ecr.<your-region>.amazonaws.com/<your-repo-name>:<tag>

This command downloads the specified image from the ECR registry to your local Docker image library.

Best Practices

  • Use IAM Roles: If your applications are running on AWS services like ECS, Lambda, or EC2, consider using IAM roles instead of individual IAM users. This enhances security and control.
  • Implement Lifecycle Policies: Use ECR lifecycle policies to manage your images and control costs by automatically deleting older images.
  • Enable Image Scanning: Enable image scanning on your ECR repositories to identify vulnerabilities in your container images before deployment.

Conclusion

AWS ECR simplifies the management of Docker images, allowing developers to focus on building applications rather than managing infrastructure. By following the above steps, you can efficiently push and pull Docker images to and from AWS ECR, integrating seamlessly into your CI/CD workflows. For more advanced configurations and options, refer to the official AWS documentation for ECR. Happy coding!

Leave a Comment