aws-ecr

# AWS ECR Manage Elastic Container Registry repositories and images. ## List repositories ```bash aws ecr describe-repositories --query 'repositories[].{Name:repositoryName,Uri:repositoryUri,Created:createdAt}' --output table ``` ## List images ```bash aws ecr list-images --repository-name my-repo --query 'imageIds[].{Tag:imageTag,Digest:imageDigest}' --output table | head -20 ``` ## Describe images (with size/push date) ```bash aws ecr describe-images --repository-name my-repo --query 'imageDetails | sort_by(@, &imagePushedAt) | reverse(@)[:10].{Tags:imageTags[0],Size:imageSizeInBytes,Pushed:imagePushedAt}' --output table ``` ## Get login token (for docker push/pull) ```bash aws ecr get-login-password | docker login --username AWS --password-stdin $(aws sts get-caller-identity --query Account --output text).dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com ``` ## Delete image ```bash aws ecr batch-delete-image --repository-name my-repo --image-ids imageTag=old-tag | jq '{Deleted: .imageIds, Failures: .failures}' ``` ## Get lifecycle policy ```bash aws ecr get-lifecycle-policy --repository-name my-repo | jq '.lifecyclePolicyText | fromjson' ``` ## Notes - Login tokens expire after 12 hours. - Use lifecycle policies to auto-clean old images. - Confirm before deleting images.