ECR

Question 1

ECR

Answer 1

A managed AWS Docker registry service. Amazon ECR is a regional service.

Question 2

True/False. ECR supports Docker Registry HTTP API V2 allowing you to use Docker CLI commands or your preferred Docker tools in maintaining your existing development workflow.

Answer 2

True.

Question 3

True/False. ECR stores the containers you create and but not container software you buy through AWS Marketplace.

Answer 3

False. ECR STORES BOTH the containers you create and any container software you buy through AWS Marketplace.

Question 4

What does ECR store container images?

Answer 4

S3

Question 5

How can you define and organize repositories in your registry?

Answer 5

Using namespaces.

Question 6

What protocol is used to transfer your container images to and from ECR?

Answer 6

HTTPS

Question 7

What is a Registry?

Answer 7

A registry is provided to each AWS account; you can create image repositories in your registry and store images in them.

Question 8

What is the default registry URL?

Answer 8

The URL for your default registry is https://aws_account_id.dkr.ecr.region.amazonaws.com. You must be authenticated before you can use your registry.

Question 9

What is an Authorization Token used for?

Answer 9

Your Docker client needs to authenticate to ECR registries as an AWS user before it can push and pull images. The AWS CLI get-login command provides you with authentication credentials to pass to Docker.

Question 10

What is a Repository?

Answer 10

An image repository contains your Docker images.

Question 11

How do you specify access to ECR?

Answer 11

ECR uses resource-based permissions to let you specify who has access to a repository and what actions they can perform on it.

Question 12

How do you manage the lifecycle of the images in your repository?

Answer 12

ECR lifecycle policies enable you to specify the lifecycle management of images in a repository.

Question 13

What is a repository policy?

Answer 13

You can control access to your repositories and the images within them with repository policies.

Question 14

True/False. You can push and pull Docker images to your repositories. You can use these images locally on your development system, or you can use them in ECS task definitions.

Answer 14

True.

Question 15

True/False. You can’t replicate images in your private repositories across AWS regions.

Answer 15

False. You CAN replicate images in your private repositories across AWS regions.

Question 16

By default, what permissions do users have with ECR resources?

Answer 16

By default, IAM users don’t have permission to create or modify Amazon ECR resources or perform tasks using the Amazon ECR API.

Question 17

How do you grant permissions to ECR resources?

Answer 17

Use IAM policies to grant or deny permission to use ECR resources and operations.

Question 18

True/False. ECR partially supports resource-level permissions.

Answer 18

True.

Question 19

True/False. ECR supports the use of customer master keys (CMK) managed by AWS Key Management Service (KMS) to encrypt container images stored in your ECR repositories.

Answer 19

True.

Question 20

How are you charged for ECR?

Answer 20

You pay only for the amount of data you store in your repositories and data transferred to the Internet.