Amazon elastic container registry (ECR) was introduced as a part of Amazon elastic container service (ECS). This recipe won't touch on ECS itself; instead, just use ECR as a private registry.

In order to use Amazon ECR, you have to have an AWS account and install AWS CLI on your machine. It will be described in more detail in Chapter 6, Building Kubernetes on AWS. You'll have to create an IAM user with ACCESS KEY ID and SECRET ACCESS KEY, and associated AmazonEC2ContainerRegistryFullAccess policies, which allow full administrator access to Amazon ECR:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ecr:*"
      ],
      "Resource": "*"
    }
  ]
}

Then configure the default settings in AWS CLI via the aws configure command:

$ aws configure
AWS Access Key ID [None]: <Your AWS ACCESS KEY ID>
AWS Secret Access Key [None]: <Your AWS SECRET ACCESS KEY>
Default region name [None]: us-east-1
Default output format [None]: 

Then we can start to play with Amazon ECR.