AWS Elastic Container Registry Monitoring

AWS Elastic Container Registry - Overview

Amazon Elastic Container Registry (Amazon ECR) is a secure, scalable, and reliable AWS-managed container image registry service. Amazon ECR supports private repositories with resource-based permissions using AWS IAM, allowing specified users or Amazon EC2 instances to access your container repositories and images. With Applications Manager's Elastic Container Registry monitoring tool, you can enhance the performance, security, and efficiency of your container image repositories, ensuring smooth application deployment and management.

Creating a new AWS Elastic Container Registry monitor

To learn how to create a new AWS Elastic Container Registry monitor, refer here.

Monitored Parameters

Go to the Monitors Category View by clicking the Monitors tab. Click on the Elastic Container Registry instance available under Amazon in the Cloud Apps section. Displayed is the Amazon Elastic Container Registry bulk configuration view distributed into three tabs:

Availability tab gives the availability history for the past 24 hours or 30 days.
Performance tab gives the health status and events for the past 24 hours or 30 days.
List view tab enables you to perform bulk admin configurations.

By clicking a monitor from the list, you'll be taken to the AWS Elastic Container Registry dashboard which includes the following tabs:

Performance Overview
Configuration

Performance Overview

Parameter	Description
IMAGE PULL REQUESTS
Image Pull Request Rate	The total number of image pulls per minute from the repository between the poll interval (in pulls/min).
Image Pull Requests	The total number of pulls for the images from the repository between the poll interval.
Image Details
Image Digest	The sha256 digest of the image manifest.
Image Size	The size of the image (in MB).
Image Age	The number of days since the image was pushed to the repository (in days).
Scan Status	The current state of an image scan.
Reason	The reason for the image scan status.
Scan Completion Time	The timestamp of the last completed image scan.
Last Pull Time	The last time the image was pulled (Amazon ECR refreshes the last image pull timestamp at least once every 24 hours).
Image Scan Details
Image Digest	The sha256 digest of the image manifest.
Last Vulnerability Scan Time	The time when the vulnerability source was last updated.
Critical Severity	The count of critical severity findings.
High Severity	The count of high severity findings.
Medium Severity	The count of medium severity findings.
Informational Severity	The count of informational severity findings.
Low Severity	The count of low severity findings.
Undefined Severity	The count of undefined severity findings.

Configuration

Parameter	Description
CONFIGURATION
Registry ID	The ID of the registry.
Repository ARN	The ARN of the repository.
Repository URI	The URI of the repository.
Scan On Push	Indicates if image scanning is enabled on push.
Image Tag Mutability	Specifies whether image tags are mutable.
Encryption Type	The type of encryption used for the repository.
Creation Time	The time when the repository was created.