AWS ECR

Manage Elastic Container Registry repositories and images.

List repositories

aws ecr describe-repositories --query 'repositories[].{Name:repositoryName,Uri:repositoryUri,Created:createdAt}' --output table

List images

aws ecr list-images --repository-name my-repo --query 'imageIds[].{Tag:imageTag,Digest:imageDigest}' --output table | head -20

Describe images (with size/push date)

aws ecr describe-images --repository-name my-repo --query 'imageDetails | sort_by(@, &imagePushedAt) | reverse(@)[:10].{Tags:imageTags[0],Size:imageSizeInBytes,Pushed:imagePushedAt}' --output table

Get login token (for docker push/pull)

aws ecr get-login-password | docker login --username AWS --password-stdin $(aws sts get-caller-identity --query Account --output text).dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com

Delete image

aws ecr batch-delete-image --repository-name my-repo --image-ids imageTag=old-tag | jq '{Deleted: .imageIds, Failures: .failures}'

Get lifecycle policy

aws ecr get-lifecycle-policy --repository-name my-repo | jq '.lifecyclePolicyText | fromjson'

Notes

• Login tokens expire after 12 hours.
• Use lifecycle policies to auto-clean old images.
• Confirm before deleting images.