Amazon ECR Container Registry & S3 Storage Buckets

What you are building#

What are Amazon ECR and S3?#

• Amazon ECR (Elastic Container Registry): A managed AWS Docker container registry with image scanning on push (scan_on_push = true) and automated lifecycle policies.
• Amazon S3: Object storage used for ALB access logging and Terraform remote state backends.

Steps#

Step 1: Deploy ECR & S3 Infrastructure#

cd 01-Infrastructure-Terraform/Lab03-ECR-S3-Storage
terraform init
terraform apply -auto-approve

Verify it worked#

aws ecr describe-repositories --repository-names nti-devops-ecr

Expected Output:

{
    "repositories": [
        {
            "repositoryName": "nti-devops-ecr",
            "imageScanningConfiguration": {
                "scanOnPush": true
            }
        }
    ]
}

Clean up#

Run this even if you did not finish. Everything above is destroyable, and an account full of half-built experiments is how a surprise bill starts.

aws ecr delete-repository --repository-name <name> --force
aws s3 rm s3://<bucket> --recursive && aws s3api delete-bucket --bucket <bucket>
terraform destroy -auto-approve

Cost of this lab: Free tier — 500 MB of ECR storage and 5 GB of S3 are free for 12 months. Container images are large, so delete the repository rather than leaving a few GB of layers behind.