Deploy an AWS ECR Repository

In this guide, we will learn how to create an AWS Elastic Container Registry (ECR) repository using Infrastructure as Code. This will involve setting up the necessary resources and configurations required to deploy an ECR repository.

What We Will Do

1. Define an AWS ECR Repository: We’ll create an ECR repository where Docker images can be stored and managed.
2. Configure IAM Role and Policies: Ensure that the appropriate IAM role and policies are set up to enable access and management of the ECR repository.
3. Export Outputs: We’ll export important outputs like the repository URL for easy reference.

Let’s dive into the code to see how it’s done.

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

// Create an AWS ECR Repository
const example = new aws.ecr.Repository("example", {
    name: "my-ecr-repo",
    imageScanningConfiguration: {
        scanOnPush: true,
    },
    tags: {
        Name: "my-ecr-repo",
        Environment: "production",
    },
});
// Create an IAM policy for ECR Access
const ecrPolicy = new aws.iam.Policy("ecr_policy", {
    name: "ECRAccessPolicy",
    policy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: [
                "ecr:GetDownloadUrlForLayer",
                "ecr:BatchGetImage",
                "ecr:BatchCheckLayerAvailability",
            ],
            Effect: "Allow",
            Resource: "*",
        }],
    }),
});
export const repositoryUrl = example.repositoryUrl;

Key Points

• Provider Configuration: We start by defining the AWS region where our resources will be created.
• ECR Repository: We set up an AWS ECR repository with a name and enable image scanning on push.
• IAM Policy: We define an IAM policy to grant necessary ECR access permissions.
• Outputs: Export the repository URL to easily reference the ECR repository in other parts of the infrastructure or configurations.

Summary

In this tutorial, we created an AWS ECR repository along with the necessary IAM policy to manage and access the repository. We also exported the repository URL for easy access. This setup is essential for managing container images in a scalable and secure manner.