Setting Up AWS ECR

Amazon Elastic Container Registry (Amazon ECR) is a fully managed container registry that provides highly available and secure hosting for container images and artifacts. It allows you to deploy your applications reliably anywhere.

1. Navigate to the External Registry Creation Screen

1) Move to [Build Configuration] - [External Container Registry].

[Screen] Registry

2) Click the "+ Register" button in the upper right corner and select the provider you want to create.

[Screen] Select External Registry

2. Enter Registry Registration Information

1) Click the "+ Register" button, and then select "AWS ECR"

[Screen] Select External Registry (AWS ECR)

2) After entering the AWS authentication information in the basic details, click the "Test Connection" button.

[Screen] Register AWS Registry Authentication Information

Item (* is required)	Content
Name*	Enter the name for the external container registry you want to register
Description	Enter the description for the external container registry you want to register
Endpoint URL*	Endpoint Address of the External Container Registry
Region*	Region of the Registered Registry
Registry*	Name of the Registered Registry
Access ID*	Access Key
Access Secret*	Secret Access Key

1. Enter the name of the registry to be created in the registry.

2. Enter a description for the registry in the description.

3. Enter the EndPoint URL in the correct format.

4. Select the region of the registered registry.

5. Enter the name of the registered registry.

6. Enter Access ID and Access Secret.

7. Click "Test Connection" in the upper right corner to verify if the registry is available.

8. Click the "Save" button in the upper right corner.

---

Access ID & Access Secret Verification Method

1) Access the AWS Console to retrieve the necessary information.

https://console.aws.amazon.com/console/home

2) Click on the registered user, then click the tab, and click the button in the upper right corner of the "Access keys" box.

3) Click "Other" among the next buttons and click "Next."

4) Enter a description tag for the access key to be created and click the "Create access key" button.

5) Confirm the generated access key and secret access key values.

Creating a Registry

You can create both private and public repositories.

(Note: This guide is written based on the private repository in the 'us-east-1' region, and the process is the same for public repositories.)

https://us-east-1.console.aws.amazon.com/ecr/

1) Click the "Create Repository" button in the upper right corner.

2) Enter the repository name to create the repository.

(In Cocktails, builds are done with "Registry Address/Image Name" so please make sure to create the registry as "Registry Name/Image Name")

EndPoint URL & registry Verification Method

1) Retrieve the necessary information from the list of created repositories in Cocktails.

EndPoint URL : The table below provides the necessary information

Category	EndPoint URL
Private	(User Number).dkr.ecr.(Region).amazonaws.com
Public	public.ecr.aws/(User Alias)

Registry : Repository Name Created by User

---

※ Permissions need to be granted separately for Private Registries.

Private Registry Permission Example

1) Click on "Settings" in [Amazon Elastic Container Registry] for the [Private registry].

2) Click the "Generate Policy" button in the upper right corner of [Settings] - [Permissions].

3) lick "JSON" in the upper right corner, add the following items, and click "Save Policy" to save.

Sid: Permission Name

Principal: Specify one or more AWS account IDs to grant permission. Specify more than one account using a comma-separated list.

Action : “ecr:*”