AWS Elastic Container Registry Monitoring
AWS Elastic Container Registry - Overview
Amazon Elastic Container Registry (Amazon ECR) is a secure, scalable, and reliable AWS-managed container image registry service. Amazon ECR supports private repositories with resource-based permissions using AWS IAM, allowing specified users or Amazon EC2 instances to access your container repositories and images. With Applications Manager's Elastic Container Registry monitoring tool, you can enhance the performance, security, and efficiency of your container image repositories, ensuring smooth application deployment and management.
Amazon ECR Public hosts container images in public repositories that anyone can pull, for example through the Amazon ECR Public Gallery. Applications Manager's ECR Public Repository monitor tracks the number of tagged and untagged images, the storage consumed, and the images pushed to each public repository, along with the details of the images it contains.
Creating a new AWS Elastic Container Registry or ECR Public Repository monitor
To learn how to create a new AWS Elastic Container Registry or ECR Public Repository monitor, refer here.
Monitored Parameters
Go to the Monitors Category View by clicking the Monitors tab. Click on the Elastic Container Registry or ECR Public Repository instance available under Amazon in the Cloud Apps section.
Click on the AWS Elastic Container Registry monitor to see all the metrics listed under the following tabs:
Click on the Amazon ECR Public Repository monitor to see all the metrics listed under the following tabs:
AWS Elastic Container Registry Metrics
Displayed below is the AWS Elastic Container Registry bulk configuration view distributed into three tabs:
- Availability tab gives the availability history for the past 24 hours or 30 days.
- Performance tab gives the health status and events for the past 24 hours or 30 days.
- List view tab enables you to perform bulk admin configurations.
By clicking a monitor from the list, you'll be taken to the AWS Elastic Container Registry dashboard.
AWS Elastic Container Registry - Performance Overview
| Parameter | Description |
|---|
| IMAGE PULL REQUESTS |
| Image Pull Request Rate | The total number of image pulls per minute from the repository between the poll interval (in pulls/min). |
| Image Pull Requests | The total number of pulls for the images from the repository between the poll interval. |
| IMAGE DETAILS |
| Image Digest | The sha256 digest of the image manifest. |
| Image Size | The size of the image (in MB). |
| Image Age | The number of days since the image was pushed to the repository (in days). |
| Scan Status | The current state of an image scan. |
| Reason | The reason for the image scan status. |
| Scan Completion Time | The timestamp of the last completed image scan. |
| Last Pull Time | The last time the image was pulled (Amazon ECR refreshes the last image pull timestamp at least once every 24 hours). |
| IMAGE SCAN DETAILS |
| Image Digest | The sha256 digest of the image manifest. |
| Last Vulnerability Scan Time | The time when the vulnerability source was last updated. |
| Critical Severity | The count of critical severity findings. |
| High Severity | The count of high severity findings. |
| Medium Severity | The count of medium severity findings. |
| Informational Severity | The count of informational severity findings. |
| Low Severity | The count of low severity findings. |
| Undefined Severity | The count of undefined severity findings. |
AWS Elastic Container Registry - Configuration
| Parameter | Description |
|---|
| CONFIGURATION |
| Registry ID | The ID of the registry. |
| Repository ARN | The ARN of the repository. |
| Repository URI | The URI of the repository. |
| Scan On Push | Indicates if image scanning is enabled on push. |
| Image Tag Mutability | Specifies whether image tags are mutable. |
| Encryption Type | The type of encryption used for the repository. |
| Creation Time | The time when the repository was created. |
Amazon ECR Public Repository Metrics
Displayed below is the Amazon ECR Public Repository bulk configuration view distributed into three tabs:
- Availability tab gives the availability history for the past 24 hours or 30 days.
- Performance tab gives the health status and events for the past 24 hours or 30 days.
- List view tab enables you to perform bulk admin configurations.
By clicking a monitor from the list, you'll be taken to the Amazon ECR Public Repository dashboard.
Amazon ECR Public Repository - Performance Overview
| Parameter | Description |
|---|
| ECR PUBLIC REPOSITORY INFORMATION |
| Repository URI | The unique Uniform Resource Identifier of the public repository. |
| Registry ID | The unique identifier of the AWS account associated with the public registry. |
| Creation Time | The date and time when the public repository was created. |
| UNTAGGED IMAGES PERCENTAGE |
| Untagged Images Percentage | The percentage of public repository images that have no associated tags at the time of polling (in %). |
| REPOSITORY IMAGE PUSHES |
| Repository Image Pushes | The number of images pushed to the repository since the previous poll. |
| REPOSITORY STORAGE |
| Repository Storage | The total storage space consumed by all images inside the repository at the time of polling (in GB). |
| REPOSITORY IMAGES BREAKDOWN |
| Untagged Images | The total number of images without any tags in the repository at the time of polling. |
| Tagged Images | The total number of images associated with one or more tags in the repository at the time of polling. |
| Total Images | The total number of images stored in the repository at the time of polling. |
| TAGGED IMAGES BREAKDOWN |
| Single Tagged Images | The total number of public images that are uniquely identified by a single tag at the time of polling. |
| Multi Tagged Images | The total number of public images associated with multiple tags at the time of polling. |
Amazon ECR Public Repository - Images
Note: By default, metrics are calculated using up to 5,000 images collected from this public repository. Repository-wide statistics may differ if the repository contains more than 5,000 images.
| Parameter | Description |
|---|
| IMAGE DETAILS |
| Image Tags | The list of string labels assigned to identify this specific image version snapshot. |
| Artifact Type | The type of the image artifact layout stored in the repository. |
| Number of Attached Image Tags | The total number of tags attached to the images at the time of polling. |
| Pushed Time | The date and time when the image artifact was pushed to the repository. |
| Image Age | The total number of days since the image artifact was pushed to the repository (in days). |
| Image Size | The total compressed storage size of the image artifact (in MB). |
| Image Digest | The unique sha256 cryptographic hash identifier of the image artifact. |
