Containers
Amazon ECR
Amazon ECR stores and distributes private or public OCI container images. GenAI delivery pipelines use it for versioned custom inference servers, model-sidecars, evaluation jobs, and agent tools.
Key points
- Image scanning identifies supported operating-system and language-package vulnerabilities
- Immutable tags prevent a released label from silently changing
- Lifecycle policies remove superseded images while replication supports other Regions
When to use it
- Publish a custom SageMaker inference image
- Distribute a vetted embedding worker to ECS or EKS
Exam tips
- Use immutable digests in deployment evidence instead of mutable latest tags
- Scanning an image does not assess model behavior or protect secrets baked into layers