ECR for container image registry in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Amazon ECR?

Amazon Elastic Container Registry (ECR) is a fully managed container image registry service that makes it easy to store, manage, and deploy Docker container images securely.

intermediate

How does Amazon ECR help with container image security?

Amazon ECR integrates with AWS Identity and Access Management (IAM) to control who can access your container images. It also supports image scanning to detect vulnerabilities in your container images.

intermediate

What is the benefit of using a managed container registry like ECR compared to a self-hosted registry?

Using ECR removes the need to manage infrastructure for storing container images. It provides high availability, scalability, and integrates with other AWS services, reducing operational overhead.

beginner

What is a repository in Amazon ECR?

A repository in Amazon ECR is a collection where container images are stored and organized. Each repository can hold multiple versions of container images identified by tags.

intermediate

How do you authenticate Docker to push or pull images from Amazon ECR?

You authenticate Docker to Amazon ECR by retrieving an authentication token using the AWS CLI and then using it to log in to the ECR registry. This token is temporary and must be refreshed regularly.

What does Amazon ECR primarily store?

A Server logs

B Virtual machines

C Database backups

D Container images

Amazon ECR is designed to store container images used for deploying containers.

Which AWS service controls access permissions for ECR repositories?

A AWS CloudTrail

B AWS Lambda

C AWS IAM

D AWS S3

AWS Identity and Access Management (IAM) manages permissions for accessing ECR repositories.

What is required before pushing a Docker image to ECR?

A Authenticate Docker with ECR using a token

B Create an EC2 instance

C Enable CloudWatch logging

D Set up a VPC

Docker must be authenticated with ECR using a temporary token before pushing images.

Which feature helps identify security issues in container images stored in ECR?

A Image scanning

B Auto scaling

C Load balancing

D CloudFormation

Image scanning detects vulnerabilities in container images stored in ECR.

What is a repository in Amazon ECR?

A A database instance

B A storage location for container images

C A compute resource

D A network gateway

A repository is where container images are stored and organized in ECR.

Explain how Amazon ECR integrates with Docker to manage container images.

Think about how Docker clients connect securely to ECR and how images are stored.

Describe the security features provided by Amazon ECR for container image management.

Consider both access control and image protection mechanisms.