Add An Amazon ECR Service
In order to integrate Amazon ECR with MetaDefender Software Supply Chain, please follow these steps:

- From the left side menu, navigate to Inventory and choose Amazon ECR
- Give your connection a name so you can easily identify it later.
- Enter your AWS Access Key ID. Scroll to the end of this page for more details.
- Enter your AWS Secret Access Key. Scroll to the end of this page for more details.
- Select your AWS Region where your repositories are located.
- Select Add Connection in order to finish the process.
Where can I find the Access Key ID and Secret Access Key?
To generate an Access Key ID / Secret Access Key pair please follow these steps:
- Log in to IAM Console and go to Users.
- In the Details pane, click on the appropriate IAM user or create one if none exists.
- From the Security Credentials tab, click Create Access Key.
If you already have a maximum of two access keys - active or inactive - you must delete one first before proceeding. If you need more than two root access keys, IAM users (each of whom can be assigned their own access keys) would probably better suit your requirements.
Necessary AWS policies
"ecr:BatchGetImage"
"ecr:BatchCheckLayerAvailability"
"ecr:CompleteLayerUpload"
"ecr:DescribeRegistry"
"ecr:DescribeRepositories"
"ecr:GetRegistryPolicy"
"ecr:GetDownloadUrlForLayer"
"ecr:GetAuthorizationToken"
"ecr:ListTagsForResource"
"ecr:ListImages"
"ecr-public:DescribeRepositories"
Was this page helpful?