Amazon EC2 Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images. You can use Amazon ECR and Amazon EC2 Container Service (ECS) together to securely and easily collaborate and deploy across your development, testing, and production environments.
Amazon EC2 Container Registry is integrated with Amazon ECS allowing you to easily store, run, and manage container images for applications running on Amazon ECS. All you need to do is specify the Amazon ECR repository in your Task Definition and Amazon ECS will retrieve the appropriate images for your applications.
Amazon EC2 Container Registry supports Docker Registry HTTP API V2 allowing you to use Docker CLI commands (e.g., push, pull, list, tag) or your preferred Docker tools to interact with Amazon ECR, maintaining your existing development workflow. You can easily access Amazon ECR from any Docker environment, whether in the cloud, on-premises, or on your local machine.
Amazon EC2 Container Registry stores your container images in Amazon S3. Your data is redundantly stored across multiple facilities and multiple devices in each facility.
Amazon EC2 Container Registry supports the ability to define and organize repositories in your registry using namespaces. This allows you to organize your repositories based on your team’s existing workflows. You can set which API actions another user may perform on your repository (e.g., create, list, describe, delete, and get) through resource-level policies, allowing you to easily share your repositories with different users and AWS accounts.
Amazon EC2 Container Registry uses AWS Identity and Access Management to control and monitor who and what (e.g., EC2 instances) can access your container images. Through IAM you can define policies to allow users within the same AWS account or other accounts to access your container images. You can also further refine these policies by specifying different permissions for different users and roles, e.g push, pull, or full admin access.
You can transfer your container images to and from Amazon EC2 Container Registry via HTTPS. Your images are also automatically encrypted at rest using Amazon S3 server-side encryption.
Amazon EC2 Container Registry is integrated with third-party developer tools. You can integrate Amazon ECR into your continuous integration and delivery process allowing you to maintain your existing development workflow. Learn more about our third-party integration on our Partners page.