All 7 Elastic Container Registry (ECR) questions
More in Elastic Container Registry (ECR)
What is Amazon Elastic Container Registry and how does it fit into a containerized application workflow? How can ECR repository policies control which IAM users, roles, or other AWS accounts can access a specific container image repository? How does ECR image scanning help identify security vulnerabilities within container images before they are deployed? How do ECR lifecycle policies help automatically manage and clean up old or unused container images to control storage costs? How can ECR pull through cache repositories simplify managing dependencies on public container registries while maintaining private, controlled access? How should an organization design a comprehensive container image governance strategy across multiple ECR repositories, teams, and AWS accounts?
Advertisement
AWS › Elastic Container Registry (ECR)

How do you authenticate Docker to push and pull images from a private ECR repository?

Beginner

Answer

You authenticate Docker to ECR using the AWS CLI's ecr get-login-password command, which retrieves a temporary authentication token that is then piped directly into a docker login command, granting Docker time limited access to push and pull images from your private ECR repository, relying on your existing IAM credentials rather than requiring a separate, permanently stored registry password.
aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 123456789012.dkr.ecr.us-east-1.amazonaws.com
Real-world example A CI/CD pipeline automatically authenticates to ECR using temporary credentials derived from its assumed IAM role, pushing a newly built container image without ever needing a separately managed, long lived registry password stored anywhere in the pipeline configuration.

Common follow-ups: How long does an ECR authentication token remain valid before needing to be refreshed?;What IAM permissions are required to push and pull images from ECR?

IAM;AWS CodePipeline CodeBuild & CodeDeploy (CI/CD)
All 7 Elastic Container Registry (ECR) questions