ECR

Question 1

Which AWS service provides a secure, scalable, and reliable managed container image registry?

Answer 1

Amazon Elastic Container Registry (ECR)

Question 2

What types of ECR registries does each AWS account have?

Answer 2

Each AWS account has two types of registries:
- Public: Read-only by default, with read-write access requiring permissions
- Private: Both read-only and read-write access require permissions

Question 3

What are the primary components of the ECR service?

Answer 3

The main components of ECR include:
- Public and Private Registries: Each registry can contain multiple repositories
- Repositories: Each repository can hold multiple images
- Images: Each image can have several tags (representing different versions)

Question 4

Which ECR feature automatically scans container images for known software vulnerabilities?

Answer 4

Security Scanning, available in both basic and enhanced modes, with the enhanced mode using AWS Inspector

Question 5

What are the primary features of the ECR service?

Answer 5

• Supports cross-region and cross-account replication
• Supports events via EventBridge
• Integrated with IAM for access control
• Provides near real-time metrics via CloudWatch
• Logs API actions through AWS CloudTrail

Question 6

What option can be used to retag images stored in AWS ECR?

Answer 6

Use the --image-tag option with the put-image command:

aws ecr put-image \ --repository-name <name> \ --image-tag <tag> \ --image-manifest <manifest>

Question 7

What does image tag immutability do in AWS ECR?

Answer 7

Prevents image tags from being overwritten

Question 8

What error is returned if an existing image tag is pushed to an ECR repository with tag immutability enabled?

Answer 8

ImageTagAlreadyExistsException` error

Question 9

What types of images can AWS ECR store?

Answer 9

• Docker images
• Open Container Initiative (OCI) images
• OCI-compatible artifacts

Question 10

Does Amazon ECR support multi-architecture images?

Answer 10

Yes, it supports pushing multi-architectural images to a private registry (experimental features need to be enabled)

Question 11

What command is required to push multi-architecture images to Amazon ECR?

Answer 11

docker manifest push