AWS Elastic Container Registry Monitoring
AWS Elastic Container Registry - Overview
Amazon Elastic Container Registry (Amazon ECR) is a secure, scalable, and reliable AWS-managed container image registry service. Amazon ECR supports private repositories with resource-based permissions using AWS IAM, allowing specified users or Amazon EC2 instances to access your container repositories and images. With Applications Manager's Elastic Container Registry monitoring tool, you can enhance the performance, security, and efficiency of your container image repositories, ensuring smooth application deployment and management.
Creating a new AWS Elastic Container Registry monitor
To learn how to create a new AWS Elastic Container Registry monitor, refer here.
Monitored Parameters
Go to the Monitors Category View by clicking the Monitors tab. Click on the Elastic Container Registry instance available under Amazon in the Cloud Apps section. Displayed is the Amazon Elastic Container Registry bulk configuration view distributed into three tabs:
- Availability tab gives the availability history for the past 24 hours or 30 days.
- Performance tab gives the health status and events for the past 24 hours or 30 days.
- List view tab enables you to perform bulk admin configurations.
By clicking a monitor from the list, you'll be taken to the AWS Elastic Container Registry dashboard which includes the following tabs:
Performance Overview
| Parameter | Description |
|---|
| IMAGE PULL REQUESTS |
| Image Pull Request Rate | The total number of image pulls per minute from the repository between the poll interval (in pulls/min). |
| Image Pull Requests | The total number of pulls for the images from the repository between the poll interval. |
| Image Details |
| Image Digest | The sha256 digest of the image manifest. |
| Image Size | The size of the image (in MB). |
| Image Age | The number of days since the image was pushed to the repository (in days). |
| Scan Status | The current state of an image scan. |
| Reason | The reason for the image scan status. |
| Scan Completion Time | The timestamp of the last completed image scan. |
| Last Pull Time | The last time the image was pulled (Amazon ECR refreshes the last image pull timestamp at least once every 24 hours). |
| Image Scan Details |
| Image Digest | The sha256 digest of the image manifest. |
| Last Vulnerability Scan Time | The time when the vulnerability source was last updated. |
| Critical Severity | The count of critical severity findings. |
| High Severity | The count of high severity findings. |
| Medium Severity | The count of medium severity findings. |
| Informational Severity | The count of informational severity findings. |
| Low Severity | The count of low severity findings. |
| Undefined Severity | The count of undefined severity findings. |
Configuration
| Parameter | Description |
|---|
| CONFIGURATION |
| Registry ID | The ID of the registry. |
| Repository ARN | The ARN of the repository. |
| Repository URI | The URI of the repository. |
| Scan On Push | Indicates if image scanning is enabled on push. |
| Image Tag Mutability | Specifies whether image tags are mutable. |
| Encryption Type | The type of encryption used for the repository. |
| Creation Time | The time when the repository was created. |
