Amazon ECR Repositories

Create and manage multiple Amazon Elastic Container Repository (ECR) Repositories that can be used to store your Docker images.

View on GitHub

Reference

Inputs

• default_automatic_image_scanning — Whether or not to enable image scanning on all the repos. Can be overridden on a per repo basis by the enable_automatic_image_scanning property in the repositories map.

• default_encryption_config — The default encryption configuration to apply to the created ECR repository. When null, the images in the ECR repo will not be encrypted at rest. Can be overridden on a per repo basis by the encryption_config property in the repositories map.

• default_external_account_ids_with_read_access — The default list of AWS account IDs for external AWS accounts that should be able to pull images from these ECR repos. Can be overridden on a per repo basis by the external_account_ids_with_read_access property in the repositories map.

• default_external_account_ids_with_write_access — The default list of AWS account IDs for external AWS accounts that should be able to pull and push images to these ECR repos. Can be overridden on a per repo basis by the external_account_ids_with_write_access property in the repositories map.

• default_image_tag_mutability — The tag mutability setting for all the repos. Must be one of: MUTABLE or IMMUTABLE. Can be overridden on a per repo basis by the image_tag_mutability property in the repositories map.

• global_tags — A map of tags (where the key and value correspond to tag keys and values) that should be assigned to all ECR repositories.

• repositories — A map of repo names to configurations for that repository.

Outputs

• ecr_read_policy_actions — A list of IAM policy actions necessary for ECR read access.

• ecr_repo_arns — A map of repository name to its ECR ARN.

• ecr_repo_urls — A map of repository name to its URL.

• ecr_write_policy_actions — A list of IAM policy actions necessary for ECR write access.