AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Interface for accessing ECR
Amazon Elastic Container RegistryAmazon Elastic Container Registry (Amazon ECR) is a managed container image registry service. Customers can use the familiar Docker CLI, or their preferred client, to push, pull, and manage images. Amazon ECR provides a secure, scalable, and reliable registry for your Docker or Open Container Initiative (OCI) images. Amazon ECR supports private repositories with resource-based permissions using IAM so that specific users or Amazon EC2 instances can access repositories and images.
Amazon ECR has service endpoints in each supported Region. For more information, see Amazon ECR endpoints in the Amazon Web Services General Reference.
Namespace: Amazon.ECR
Assembly: AWSSDK.ECR.dll
Version: 3.x.y.z
public interface IAmazonECR IAmazonService, IDisposable
The IAmazonECR type exposes the following members
Name | Type | Description | |
---|---|---|---|
Paginators | Amazon.ECR.Model.IECRPaginatorFactory |
Paginators for the service |
Name | Description | |
---|---|---|
BatchCheckLayerAvailability(BatchCheckLayerAvailabilityRequest) |
Checks the availability of one or more image layers in a repository. When an image is pushed to a repository, each image layer is checked to verify if it has been uploaded before. If it has been uploaded, then the image layer is skipped.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
BatchCheckLayerAvailabilityAsync(BatchCheckLayerAvailabilityRequest, CancellationToken) |
Checks the availability of one or more image layers in a repository. When an image is pushed to a repository, each image layer is checked to verify if it has been uploaded before. If it has been uploaded, then the image layer is skipped.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
BatchDeleteImage(BatchDeleteImageRequest) |
Deletes a list of specified images within a repository. Images are specified with
either an You can remove a tag from an image by specifying the image's tag in your request. When you remove the last tag from an image, the image is deleted from your repository. You can completely delete an image (and all of its tags) by specifying the image's digest in your request. |
|
BatchDeleteImageAsync(BatchDeleteImageRequest, CancellationToken) |
Deletes a list of specified images within a repository. Images are specified with
either an You can remove a tag from an image by specifying the image's tag in your request. When you remove the last tag from an image, the image is deleted from your repository. You can completely delete an image (and all of its tags) by specifying the image's digest in your request. |
|
BatchGetImage(BatchGetImageRequest) |
Gets detailed information for an image. Images are specified with either an When an image is pulled, the BatchGetImage API is called once to retrieve the image manifest. |
|
BatchGetImageAsync(BatchGetImageRequest, CancellationToken) |
Gets detailed information for an image. Images are specified with either an When an image is pulled, the BatchGetImage API is called once to retrieve the image manifest. |
|
BatchGetRepositoryScanningConfiguration(BatchGetRepositoryScanningConfigurationRequest) |
Gets the scanning configuration for one or more repositories. |
|
BatchGetRepositoryScanningConfigurationAsync(BatchGetRepositoryScanningConfigurationRequest, CancellationToken) |
Gets the scanning configuration for one or more repositories. |
|
CompleteLayerUpload(CompleteLayerUploadRequest) |
Informs Amazon ECR that the image layer upload has completed for a specified registry,
repository name, and upload ID. You can optionally provide a When an image is pushed, the CompleteLayerUpload API is called once per each new image layer to verify that the upload has completed.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
CompleteLayerUploadAsync(CompleteLayerUploadRequest, CancellationToken) |
Informs Amazon ECR that the image layer upload has completed for a specified registry,
repository name, and upload ID. You can optionally provide a When an image is pushed, the CompleteLayerUpload API is called once per each new image layer to verify that the upload has completed.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
CreatePullThroughCacheRule(CreatePullThroughCacheRuleRequest) |
Creates a pull through cache rule. A pull through cache rule provides a way to cache images from an upstream registry source in your Amazon ECR private registry. For more information, see Using pull through cache rules in the Amazon Elastic Container Registry User Guide. |
|
CreatePullThroughCacheRuleAsync(CreatePullThroughCacheRuleRequest, CancellationToken) |
Creates a pull through cache rule. A pull through cache rule provides a way to cache images from an upstream registry source in your Amazon ECR private registry. For more information, see Using pull through cache rules in the Amazon Elastic Container Registry User Guide. |
|
CreateRepository(CreateRepositoryRequest) |
Creates a repository. For more information, see Amazon ECR repositories in the Amazon Elastic Container Registry User Guide. |
|
CreateRepositoryAsync(CreateRepositoryRequest, CancellationToken) |
Creates a repository. For more information, see Amazon ECR repositories in the Amazon Elastic Container Registry User Guide. |
|
DeleteLifecyclePolicy(DeleteLifecyclePolicyRequest) |
Deletes the lifecycle policy associated with the specified repository. |
|
DeleteLifecyclePolicyAsync(DeleteLifecyclePolicyRequest, CancellationToken) |
Deletes the lifecycle policy associated with the specified repository. |
|
DeletePullThroughCacheRule(DeletePullThroughCacheRuleRequest) |
Deletes a pull through cache rule. |
|
DeletePullThroughCacheRuleAsync(DeletePullThroughCacheRuleRequest, CancellationToken) |
Deletes a pull through cache rule. |
|
DeleteRegistryPolicy(DeleteRegistryPolicyRequest) |
Deletes the registry permissions policy. |
|
DeleteRegistryPolicyAsync(DeleteRegistryPolicyRequest, CancellationToken) |
Deletes the registry permissions policy. |
|
DeleteRepository(DeleteRepositoryRequest) |
Deletes a repository. If the repository isn't empty, you must either delete the contents
of the repository or use the |
|
DeleteRepositoryAsync(DeleteRepositoryRequest, CancellationToken) |
Deletes a repository. If the repository isn't empty, you must either delete the contents
of the repository or use the |
|
DeleteRepositoryPolicy(DeleteRepositoryPolicyRequest) |
Deletes the repository policy associated with the specified repository. |
|
DeleteRepositoryPolicyAsync(DeleteRepositoryPolicyRequest, CancellationToken) |
Deletes the repository policy associated with the specified repository. |
|
DescribeImageReplicationStatus(DescribeImageReplicationStatusRequest) |
Returns the replication status for a specified image. |
|
DescribeImageReplicationStatusAsync(DescribeImageReplicationStatusRequest, CancellationToken) |
Returns the replication status for a specified image. |
|
DescribeImages(DescribeImagesRequest) |
Returns metadata about the images in a repository.
Beginning with Docker version 1.9, the Docker client compresses image layers before
pushing them to a V2 Docker registry. The output of the |
|
DescribeImagesAsync(DescribeImagesRequest, CancellationToken) |
Returns metadata about the images in a repository.
Beginning with Docker version 1.9, the Docker client compresses image layers before
pushing them to a V2 Docker registry. The output of the |
|
DescribeImageScanFindings(DescribeImageScanFindingsRequest) |
Returns the scan findings for the specified image. |
|
DescribeImageScanFindingsAsync(DescribeImageScanFindingsRequest, CancellationToken) |
Returns the scan findings for the specified image. |
|
DescribePullThroughCacheRules(DescribePullThroughCacheRulesRequest) |
Returns the pull through cache rules for a registry. |
|
DescribePullThroughCacheRulesAsync(DescribePullThroughCacheRulesRequest, CancellationToken) |
Returns the pull through cache rules for a registry. |
|
DescribeRegistry(DescribeRegistryRequest) |
Describes the settings for a registry. The replication configuration for a repository can be created or updated with the PutReplicationConfiguration API action. |
|
DescribeRegistryAsync(DescribeRegistryRequest, CancellationToken) |
Describes the settings for a registry. The replication configuration for a repository can be created or updated with the PutReplicationConfiguration API action. |
|
DescribeRepositories(DescribeRepositoriesRequest) |
Describes image repositories in a registry. |
|
DescribeRepositoriesAsync(DescribeRepositoriesRequest, CancellationToken) |
Describes image repositories in a registry. |
|
DetermineServiceOperationEndpoint(AmazonWebServiceRequest) |
Returns the endpoint that will be used for a particular request. |
|
GetAuthorizationToken(GetAuthorizationTokenRequest) |
Retrieves an authorization token. An authorization token represents your IAM authentication credentials and can be used to access any Amazon ECR registry that your IAM principal has access to. The authorization token is valid for 12 hours.
The |
|
GetAuthorizationTokenAsync(GetAuthorizationTokenRequest, CancellationToken) |
Retrieves an authorization token. An authorization token represents your IAM authentication credentials and can be used to access any Amazon ECR registry that your IAM principal has access to. The authorization token is valid for 12 hours.
The |
|
GetDownloadUrlForLayer(GetDownloadUrlForLayerRequest) |
Retrieves the pre-signed Amazon S3 download URL corresponding to an image layer. You can only get URLs for image layers that are referenced in an image. When an image is pulled, the GetDownloadUrlForLayer API is called once per image layer that is not already cached.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
GetDownloadUrlForLayerAsync(GetDownloadUrlForLayerRequest, CancellationToken) |
Retrieves the pre-signed Amazon S3 download URL corresponding to an image layer. You can only get URLs for image layers that are referenced in an image. When an image is pulled, the GetDownloadUrlForLayer API is called once per image layer that is not already cached.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
GetLifecyclePolicy(GetLifecyclePolicyRequest) |
Retrieves the lifecycle policy for the specified repository. |
|
GetLifecyclePolicyAsync(GetLifecyclePolicyRequest, CancellationToken) |
Retrieves the lifecycle policy for the specified repository. |
|
GetLifecyclePolicyPreview(GetLifecyclePolicyPreviewRequest) |
Retrieves the results of the lifecycle policy preview request for the specified repository. |
|
GetLifecyclePolicyPreviewAsync(GetLifecyclePolicyPreviewRequest, CancellationToken) |
Retrieves the results of the lifecycle policy preview request for the specified repository. |
|
GetRegistryPolicy(GetRegistryPolicyRequest) |
Retrieves the permissions policy for a registry. |
|
GetRegistryPolicyAsync(GetRegistryPolicyRequest, CancellationToken) |
Retrieves the permissions policy for a registry. |
|
GetRegistryScanningConfiguration(GetRegistryScanningConfigurationRequest) |
Retrieves the scanning configuration for a registry. |
|
GetRegistryScanningConfigurationAsync(GetRegistryScanningConfigurationRequest, CancellationToken) |
Retrieves the scanning configuration for a registry. |
|
GetRepositoryPolicy(GetRepositoryPolicyRequest) |
Retrieves the repository policy for the specified repository. |
|
GetRepositoryPolicyAsync(GetRepositoryPolicyRequest, CancellationToken) |
Retrieves the repository policy for the specified repository. |
|
InitiateLayerUpload(InitiateLayerUploadRequest) |
Notifies Amazon ECR that you intend to upload an image layer. When an image is pushed, the InitiateLayerUpload API is called once per image layer that has not already been uploaded. Whether or not an image layer has been uploaded is determined by the BatchCheckLayerAvailability API action.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
InitiateLayerUploadAsync(InitiateLayerUploadRequest, CancellationToken) |
Notifies Amazon ECR that you intend to upload an image layer. When an image is pushed, the InitiateLayerUpload API is called once per image layer that has not already been uploaded. Whether or not an image layer has been uploaded is determined by the BatchCheckLayerAvailability API action.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
ListImages(ListImagesRequest) |
Lists all the image IDs for the specified repository.
You can filter images based on whether or not they are tagged by using the |
|
ListImagesAsync(ListImagesRequest, CancellationToken) |
Lists all the image IDs for the specified repository.
You can filter images based on whether or not they are tagged by using the |
|
ListTagsForResource(ListTagsForResourceRequest) |
List the tags for an Amazon ECR resource. |
|
ListTagsForResourceAsync(ListTagsForResourceRequest, CancellationToken) |
List the tags for an Amazon ECR resource. |
|
PutImage(PutImageRequest) |
Creates or updates the image manifest and tags associated with an image. When an image is pushed and all new image layers have been uploaded, the PutImage API is called once to create or update the image manifest and the tags associated with the image.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
PutImageAsync(PutImageRequest, CancellationToken) |
Creates or updates the image manifest and tags associated with an image. When an image is pushed and all new image layers have been uploaded, the PutImage API is called once to create or update the image manifest and the tags associated with the image.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
PutImageScanningConfiguration(PutImageScanningConfigurationRequest) |
The Updates the image scanning configuration for the specified repository. |
|
PutImageScanningConfigurationAsync(PutImageScanningConfigurationRequest, CancellationToken) |
The Updates the image scanning configuration for the specified repository. |
|
PutImageTagMutability(PutImageTagMutabilityRequest) |
Updates the image tag mutability settings for the specified repository. For more information, see Image tag mutability in the Amazon Elastic Container Registry User Guide. |
|
PutImageTagMutabilityAsync(PutImageTagMutabilityRequest, CancellationToken) |
Updates the image tag mutability settings for the specified repository. For more information, see Image tag mutability in the Amazon Elastic Container Registry User Guide. |
|
PutLifecyclePolicy(PutLifecyclePolicyRequest) |
Creates or updates the lifecycle policy for the specified repository. For more information, see Lifecycle policy template. |
|
PutLifecyclePolicyAsync(PutLifecyclePolicyRequest, CancellationToken) |
Creates or updates the lifecycle policy for the specified repository. For more information, see Lifecycle policy template. |
|
PutRegistryPolicy(PutRegistryPolicyRequest) |
Creates or updates the permissions policy for your registry. A registry policy is used to specify permissions for another Amazon Web Services account and is used when configuring cross-account replication. For more information, see Registry permissions in the Amazon Elastic Container Registry User Guide. |
|
PutRegistryPolicyAsync(PutRegistryPolicyRequest, CancellationToken) |
Creates or updates the permissions policy for your registry. A registry policy is used to specify permissions for another Amazon Web Services account and is used when configuring cross-account replication. For more information, see Registry permissions in the Amazon Elastic Container Registry User Guide. |
|
PutRegistryScanningConfiguration(PutRegistryScanningConfigurationRequest) |
Creates or updates the scanning configuration for your private registry. |
|
PutRegistryScanningConfigurationAsync(PutRegistryScanningConfigurationRequest, CancellationToken) |
Creates or updates the scanning configuration for your private registry. |
|
PutReplicationConfiguration(PutReplicationConfigurationRequest) |
Creates or updates the replication configuration for a registry. The existing replication
configuration for a repository can be retrieved with the DescribeRegistry API
action. The first time the PutReplicationConfiguration API is called, a service-linked
IAM role is created in your account for the replication process. For more information,
see Using
service-linked roles for Amazon ECR in the Amazon Elastic Container Registry
User Guide.
When configuring cross-account replication, the destination account must grant the
source account permission to replicate. This permission is controlled using a registry
permissions policy. For more information, see PutRegistryPolicy.
|
|
PutReplicationConfigurationAsync(PutReplicationConfigurationRequest, CancellationToken) |
Creates or updates the replication configuration for a registry. The existing replication
configuration for a repository can be retrieved with the DescribeRegistry API
action. The first time the PutReplicationConfiguration API is called, a service-linked
IAM role is created in your account for the replication process. For more information,
see Using
service-linked roles for Amazon ECR in the Amazon Elastic Container Registry
User Guide.
When configuring cross-account replication, the destination account must grant the
source account permission to replicate. This permission is controlled using a registry
permissions policy. For more information, see PutRegistryPolicy.
|
|
SetRepositoryPolicy(SetRepositoryPolicyRequest) |
Applies a repository policy to the specified repository to control access permissions. For more information, see Amazon ECR Repository policies in the Amazon Elastic Container Registry User Guide. |
|
SetRepositoryPolicyAsync(SetRepositoryPolicyRequest, CancellationToken) |
Applies a repository policy to the specified repository to control access permissions. For more information, see Amazon ECR Repository policies in the Amazon Elastic Container Registry User Guide. |
|
StartImageScan(StartImageScanRequest) |
Starts an image vulnerability scan. An image scan can only be started once per 24 hours on an individual image. This limit includes if an image was scanned on initial push. For more information, see Image scanning in the Amazon Elastic Container Registry User Guide. |
|
StartImageScanAsync(StartImageScanRequest, CancellationToken) |
Starts an image vulnerability scan. An image scan can only be started once per 24 hours on an individual image. This limit includes if an image was scanned on initial push. For more information, see Image scanning in the Amazon Elastic Container Registry User Guide. |
|
StartLifecyclePolicyPreview(StartLifecyclePolicyPreviewRequest) |
Starts a preview of a lifecycle policy for the specified repository. This allows you to see the results before associating the lifecycle policy with the repository. |
|
StartLifecyclePolicyPreviewAsync(StartLifecyclePolicyPreviewRequest, CancellationToken) |
Starts a preview of a lifecycle policy for the specified repository. This allows you to see the results before associating the lifecycle policy with the repository. |
|
TagResource(TagResourceRequest) |
Adds specified tags to a resource with the specified ARN. Existing tags on a resource are not changed if they are not specified in the request parameters. |
|
TagResourceAsync(TagResourceRequest, CancellationToken) |
Adds specified tags to a resource with the specified ARN. Existing tags on a resource are not changed if they are not specified in the request parameters. |
|
UntagResource(UntagResourceRequest) |
Deletes specified tags from a resource. |
|
UntagResourceAsync(UntagResourceRequest, CancellationToken) |
Deletes specified tags from a resource. |
|
UpdatePullThroughCacheRule(UpdatePullThroughCacheRuleRequest) |
Updates an existing pull through cache rule. |
|
UpdatePullThroughCacheRuleAsync(UpdatePullThroughCacheRuleRequest, CancellationToken) |
Updates an existing pull through cache rule. |
|
UploadLayerPart(UploadLayerPartRequest) |
Uploads an image layer part to Amazon ECR. When an image is pushed, each new image layer is uploaded in parts. The maximum size of each image layer part can be 20971520 bytes (or about 20MB). The UploadLayerPart API is called once per each new image layer part.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
UploadLayerPartAsync(UploadLayerPartRequest, CancellationToken) |
Uploads an image layer part to Amazon ECR. When an image is pushed, each new image layer is uploaded in parts. The maximum size of each image layer part can be 20971520 bytes (or about 20MB). The UploadLayerPart API is called once per each new image layer part.
This operation is used by the Amazon ECR proxy and is not generally used by customers
for pulling and pushing images. In most cases, you should use the |
|
ValidatePullThroughCacheRule(ValidatePullThroughCacheRuleRequest) |
Validates an existing pull through cache rule for an upstream registry that requires authentication. This will retrieve the contents of the Amazon Web Services Secrets Manager secret, verify the syntax, and then validate that authentication to the upstream registry is successful. |
|
ValidatePullThroughCacheRuleAsync(ValidatePullThroughCacheRuleRequest, CancellationToken) |
Validates an existing pull through cache rule for an upstream registry that requires authentication. This will retrieve the contents of the Amazon Web Services Secrets Manager secret, verify the syntax, and then validate that authentication to the upstream registry is successful. |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5, 4.0, 3.5