Amazon ECR Integration

Amazon ECR Credentials

Step 1: Configure AWS Access

1. Sign in to the AWS Management Console.

2. Navigate to your ECR repository.

3. Note your registry URL (e.g., 123456789012.dkr.ecr.us-east-1.amazonaws.com).

4. Ensure you have the necessary IAM permissions:

   • ecr:GetAuthorizationToken
   • ecr:BatchCheckLayerAvailability
   • ecr:GetDownloadUrlForLayer
   • ecr:GetRepositoryPolicy
   • ecr:DescribeRepositories
   • ecr:ListImages
   • ecr:BatchGetImage

Configuration Steps

1. From the Cokpit dashboard, navigate to the Integrations page
2. Select Amazon ECR under Container Registry section
3. Fill in the following details:
   • Secret Name: A unique identifier for your ECR credentials (e.g., ecr-secret)
   • Registry URL: Your ECR registry URL

Field Descriptions

Step 2: Add ECR Credentials to Cokpit

1. Open Cokpit and go to Integrations → Container Registry → Amazon ECR.
2. Click Add secret.

3. Fill in the required fields:
   • Enter a unique Secret Name
   • Enter your Registry URL
4. Click Submit.

Security Best Practices

• Use IAM roles with minimal required permissions
• Implement resource-level permissions for ECR repositories
• Enable AWS CloudTrail logging
• Regularly audit IAM policies and roles
• Use VPC endpoints for ECR access when possible