Getting started with Amazon ECR using the AWS Management Console - Amazon ECR

Getting started with Amazon ECR using the AWS Management Console

Get started with Amazon ECR by creating a repository in the Amazon ECR console. The Amazon ECR console guides you through the process to get started creating your first repository.

Before you begin, be sure that you've completed the steps in Setting up with Amazon ECR.

To create an image repository

A repository is where you store your Docker or Open Container Initiative (OCI) images in Amazon ECR. Each time you push or pull an image from Amazon ECR, you specify the repository and the registry location which informs where to push the image to or where to pull it from.

  1. Open the Amazon ECR console at

  2. Choose Get Started.

  3. For Visibility settings, choose Private.

  4. For Repository name, specify a name for the repository.

  5. For Tag immutability, choose the tag mutability setting for the repository. Repositories configured with immutable tags will prevent image tags from being overwritten. For more information, see Image tag mutability.

  6. For Scan on push, choose the image scanning setting for the repository. Repositories configured to scan on push will start an image scan whenever an image is pushed, otherwise image scans need to be started manually.


    Configuring image scanning at the repository level has been deprecated in favor of configuring it at the registry level. For more information, see Image scanning.

  7. For KMS encryption, choose whether to enable server-side encryption using AWS KMS keys stored in the AWS Key Management Service service. For more information about this feature, see Encryption at rest.

  8. Choose Create repository.

Build, tag, and push a Docker image

In this section of the wizard, you use the Docker CLI to tag an existing local image (that you have built from a Dockerfile or pulled from another registry, such as Docker Hub) and then push the tagged image to your Amazon ECR registry. For more detailed steps on using the Docker CLI, see Using Amazon ECR with the AWS CLI.

  1. Select the repository you created and choose View push commands to view the steps to push an image to your new repository.

  2. Run the login command that authenticates your Docker client to your registry by using the command from the console in a terminal window. This command provides an authorization token that is valid for 12 hours.

  3. (Optional) If you have a Dockerfile for the image to push, build the image and tag it for your new repository. Using the docker build command from the console in a terminal window. Make sure that you are in the same directory as your Dockerfile.

  4. Tag the image with your Amazon ECR registry URI and your new repository by pasting the docker tag command from the console into a terminal window. The console command assumes that your image was built from a Dockerfile in the previous step. If you did not build your image from a Dockerfile, replace the first instance of repository:latest with the image ID or image name of your local image to push.

  5. Push the newly tagged image to your repository by using the docker push command in a terminal window.

  6. Choose Close.