# Amazon Elastic Container Registry In comparison to the docker hub the private container of Amazon elastic container registry is the best example of a fully managed secure container registry. ## How Amazon ECR works The below image shows how to code in the image is pushed to amazon ecr and run in containers either on-premises or cloud. ![Panorama - How it Works](https://d1.awsstatic.com/legal/AmazonElasticContainerRegistry/Product-Page-Diagram_Amazon-ECR.2f9e7f26ef78f4dc6f058f7eeb07cf696f6951c1.png align="left") For practice activity 500 mb of private repository storage per month, you can visit the amazon ecr page for more info. ## Amazon Elastic Container Features * Amazon container orchestrator integration:- ECR integrated with ECS and EKS * OCI and Docker support:- ECR supports the docker registry that allows the docker cli command * Public container image and artifact gallery:- On ECR public gallery popular base images can be found easily without login to AWS. * AWS Marketplace:- it stores containers software you can purchase from the AWS marketplace * High availability and durability:- ECR stores container images in S3, and creates and stores copies of all S3 objects. * Team and public collaboration:- Helps in the team's existing workflow and sharing the container artifacts with anyone in the world with the help of a public repository. * Access control:- ECR uses IAM to control and monitor container images * Encryption:- ECR uses HTTPS and auto encryption using S3 server-side encryption. * Third-party integrations:- ECR is fully integrated, it can be integrated with Jenkins * Pull through cache repositories:- ECR pulls through cache repositories and sync container artifacts stored in publicly accessible container registries ## Example of AWS ECR Log in to the console of AWS as a user, and search Amazon Elastic Container Registry. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688393629207/2103ceb1-60bd-4fbe-8dd0-d77bf4b81252.png align="left") You can find multiple scroll the page like Tag immunity, Image scan setting, Encryption settings. Finally, Create the repository. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688393748643/fea2c0ce-21a5-4a93-bb3e-c26263a674f1.png align="center") Successfully created repository. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688393899361/12e04d05-cdae-4f68-8dd6-be0ef6643fc0.png align="center") Click on the repository you created in this case it is mehdinodejs You will nothing in the images, we need to create the images click on *view push commands* ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688394121068/e3bf846c-6bc6-43be-ad0c-6abe010a7943.png align="center") ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688394190095/c74efdd6-ef06-4608-9c91-ba65b78fc34e.png align="center") ## AWS ECR image push to repository Firstly you need aws machine and log in with console and get security credentials ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688397084617/95874f18-b267-454b-8fc9-32a4833db8eb.png align="center") ```basic ubuntu@ip-172-31-44-226:~$ aws configure AWS Access Key ID [****************iiii]: AWS Secret Access Key [****************oooo]: Default region name [mumbai]: Default output format [json]: ``` ```basic ubuntu@ip-172-31-44-226:~$ aws ecr get-login-password --region ap-south-1 | dock er login --username AWS --password-stdin 924831147417.dkr.ecr.ap-south-1.amazona ws.com WARNING! Your password will be stored unencrypted in /home/ubuntu/.docker/config .json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded ``` ```basic ubuntu@ip-172-31-44-226:~$ git clone https://github.com/Sagar2366/amazon-ecs-dem o-with-node-express.git Cloning into 'amazon-ecs-demo-with-node-express'... remote: Enumerating objects: 63, done. remote: Counting objects: 100% (20/20), done. remote: Compressing objects: 100% (12/12), done. remote: Total 63 (delta 10), reused 8 (delta 8), pack-reused 43 Receiving objects: 100% (63/63), 762.12 KiB | 1.17 MiB/s, done. Resolving deltas: 100% (23/23), done. Get clone from git hub and then go to below directory ubuntu@ip-172-31-44-226:~$ cd amazon-ecs-demo-with-node-express/sample-nodejs-ap p/ ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ l s Dockerfile app.js index.html package.json ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ c at Dockerfile FROM public.ecr.aws/bitnami/node:16.18.1 RUN mkdir -p /usr/src/calc WORKDIR /usr/src/calc COPY . . RUN npm install # EXPOSE 3000 CMD [ "node", "app.js" ] ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ d ocker build -t mehdinodejs . Sending build context to Docker daemon 8.192kB Step 1/6 : FROM public.ecr.aws/bitnami/node:16.18.1 16.18.1: Pulling from bitnami/node 9b0425129f68: Pull complete 71d0cad6ee3d: Pull complete Digest: sha256:111ce25a9f99b3847962a2399b53782cb99a884949c303642110a8f9edadd8e5 Status: Downloaded newer image for public.ecr.aws/bitnami/node:16.18.1 ---> 6a26bef0bc23 Step 2/6 : RUN mkdir -p /usr/src/calc ---> Running in 3a63f5adafd7 Removing intermediate container 3a63f5adafd7 ---> 7c322ae40f6a Step 3/6 : WORKDIR /usr/src/calc ---> Running in da2840119264 Removing intermediate container da2840119264 ---> 6bfa2717b77d Step 4/6 : COPY . . ---> 363dc3b7ec99 Step 5/6 : RUN npm install ---> Running in a483d5e9aa78 added 58 packages, and audited 59 packages in 3s 8 packages are looking for funding run `npm fund` for details found 0 vulnerabilities npm notice npm notice New major version of npm available! 8.19.2 -> 9.7.2 npm notice Changelog: npm notice Run `npm install -g npm@9.7.2` to update! npm notice Removing intermediate container a483d5e9aa78 ---> 66ac20eb9f54 Step 6/6 : CMD [ "node", "app.js" ] ---> Running in a1b0247550c8 Removing intermediate container a1b0247550c8 ---> 254dd1241b61 Successfully built 254dd1241b61 Successfully tagged mehdinodejs:latest ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ d ocker tag mehdinodejs:latest 924831147417.dkr.ecr.ap-south-1.amazonaws.com/mehdi nodejs:latest ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ d ocker push 924831147417.dkr.ecr.ap-south-1.amazonaws.com/mehdinodejs:latest The push refers to repository [924831147417.dkr.ecr.ap-south-1.amazonaws.com/meh dinodejs] 9f1e60ff3971: Pushed 263ba60252db: Pushed 5c5433c0ebb6: Pushed dbb6eb55e10a: Pushed 72f2450750f8: Pushed latest: digest: sha256:6d9afe1fdc2d4c2797b03e10ad94971b3551e2481bc05f4060c372b28 66724d8 size: 1368 ubuntu@ip-172-31-44-226:~/amazon-ecs-demo-with-node-express/sample-nodejs-app$ ls Dockerfile app.js index.html package.json ``` Finally, image can be found in our repository ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1688397530921/d57e9418-bc84-493a-bbe0-84e65125bbe3.png align="center") I will continue with some more examples in the next part of this post.