ECR

Question 1

Which AWS service provides a secure, scalable, and reliable managed container image registry?

Answer 1

Amazon Elastic Container Registry (ECR)

Question 2

What types of ECR registries does each AWS account have?

Answer 2

Each AWS account has two types of registries:
- Public: Read-only by default, with read-write access requiring permissions
- Private: Both read-only and read-write access require permissions

Question 3

What are the primary components of the ECR service?

Answer 3

The main components of ECR include:
- Public and Private Registries: Each registry can contain multiple repositories
- Repositories: Each repository can hold multiple images
- Images: Each image can have several tags (representing different versions)

Question 4

Which ECR feature automatically scans container images for known software vulnerabilities?

Answer 4

Security Scanning, available in both basic and enhanced modes, with the enhanced mode using AWS Inspector

Question 5

What are the primary features of the ECR service?

Answer 5

• Supports cross-region and cross-account replication
• Supports events via EventBridge
• Integrated with IAM for access control
• Provides near real-time metrics via CloudWatch
• Logs API actions through AWS CloudTrail