Containers
RecognitionAmazon Elastic Container Registry (Amazon ECR)
Managed container image registry for storing, sharing, and controlling image artifacts.
Key points
- A digest identifies immutable image content while a tag can be mutable unless repository settings prevent changes.
- Build and deployment roles need scoped push or pull permissions.
- Approved images should preserve source and build provenance.
Best-known use cases
- Store Lambda container images.
- Supply approved images to ECS or EKS application deployments.
What candidates often confuse it with
- ECR stores image artifacts; ECS and EKS run containers.
- An image tag is a label; an image digest identifies content.
Key takeaway
Use ECR as the controlled image artifact store and pin reproducible deployments to immutable content.
Related services
- AWS Lambda
- Amazon Elastic Container Service (Amazon ECS)
- Amazon Elastic Kubernetes Service (Amazon EKS)
Relevant exam tasks
- D3.1 — Prepare application artifacts to be deployed to AWS
- 3.1.1 — Manage the dependencies of the code module (for example, environment variables, configuration files, container images) within the package
- D3.3 — Automate deployment testing
- 3.3.3 — Create application environments that use approved versions for integration testing (for example, Lambda aliases, container image tags, AWS Amplify branches, AWS Copilot environments)