# \#ecr

**URL:** https://discuss.circleci.com/tag/ecr/23.md

[Latest](https://discuss.circleci.com/latest.md) · [Categories](https://discuss.circleci.com/categories.md) · [Tags](https://discuss.circleci.com/tags.md)

---

## [\[aws-ecr\] Docker image build and push separately](https://discuss.circleci.com/t/aws-ecr-docker-image-build-and-push-separately/54215)

<div class="topic-metadata">

**Author:** [@ranako](https://discuss.circleci.com/u/ranako)\
**Replies:** 0\
**Last updated:** [November 11, 2025, 8:16pm UTC](https://discuss.circleci.com/t/aws-ecr-docker-image-build-and-push-separately/54215 "2025-11-11T20:16:22Z")

</div>

Hi, I want to build an image in one job once and push it in another job rather than using build\_and\_push\_image. It is because I am using matrix in CircleCI to push image to 10 AWS regions so if I was to use build\_and\_pu…

---

## [Two Phase Deployments Using CircleCI](https://discuss.circleci.com/t/two-phase-deployments-using-circleci/54022)

<div class="topic-metadata">

**Author:** [@archtaqi](https://discuss.circleci.com/u/archtaqi)\
**Replies:** 1\
**Last updated:** [September 4, 2025, 5:28pm UTC](https://discuss.circleci.com/t/two-phase-deployments-using-circleci/54022 "2025-09-04T17:28:50Z")

</div>

I want to implement a two-phase deployment strategy using CircleCI. Here’s my goal: On every commit: build Docker images for multiple services from a monolithic codebase, tag them, and push to ECR. Later, manually choo…

---

## [Docker AWS ECR auth with oidc role doesn't seem to be working](https://discuss.circleci.com/t/docker-aws-ecr-auth-with-oidc-role-doesnt-seem-to-be-working/49267)

<div class="topic-metadata">

**Author:** [@carlosjgp](https://discuss.circleci.com/u/carlosjgp)\
**Replies:** 7\
**Last updated:** [November 14, 2024, 12:43pm UTC](https://discuss.circleci.com/t/docker-aws-ecr-auth-with-oidc-role-doesnt-seem-to-be-working/49267 "2024-11-14T12:43:01Z")

</div>

I tried configuring AWS ECR pulling through OIDC but it doesn’t seem to be working I can see on AWS that the IAM role is not being accessed version: 2.1 jobs: job\_name: docker: - image: \<your-image-arn\> …

---

## [Error when building Docker image on Alpine using aws-ecr orb](https://discuss.circleci.com/t/error-when-building-docker-image-on-alpine-using-aws-ecr-orb/51047)

<div class="topic-metadata">

**Author:** [@fatmcgav](https://discuss.circleci.com/u/fatmcgav)\
**Replies:** 3\
**Last updated:** [May 31, 2024, 8:43am UTC](https://discuss.circleci.com/t/error-when-building-docker-image-on-alpine-using-aws-ecr-orb/51047 "2024-05-31T08:43:22Z")

</div>

Hey there I’m currently trying to update some of our existing CircleCI build pipelines to use AWS OIDC authentication in order to remove some static AWS credentials. This is working great for our Helm deployments, howe…

---

## [Aws-ecr orb 9.0.2 doesn't handle shell snippets in tags anymore?](https://discuss.circleci.com/t/aws-ecr-orb-9-0-2-doesnt-handle-shell-snippets-in-tags-anymore/50313)

<div class="topic-metadata">

**Author:** [@dprice1](https://discuss.circleci.com/u/dprice1)\
**Replies:** 3\
**Last updated:** [February 7, 2024, 7:40am UTC](https://discuss.circleci.com/t/aws-ecr-orb-9-0-2-doesnt-handle-shell-snippets-in-tags-anymore/50313 "2024-02-07T07:40:16Z")

</div>

I’m attempting to update aws-ecr orb version 8.x to 9.0.2. I’m running into some issues with tags. Previously we had: tag: "$(git log --pretty=format:'%ad' --date=iso -n 1| awk '{print $1}'|tr '-' '.')-$CIRCLE\_BUILD\_NUM…

---

## [Aws-ecr: migration guide for v8 to v9?](https://discuss.circleci.com/t/aws-ecr-migration-guide-for-v8-to-v9/49012)

<div class="topic-metadata">

**Author:** [@nchpf](https://discuss.circleci.com/u/nchpf)\
**Replies:** 1\
**Last updated:** [January 21, 2024, 3:33am UTC](https://discuss.circleci.com/t/aws-ecr-migration-guide-for-v8-to-v9/49012 "2024-01-21T03:33:06Z")

</div>

Hi! we’re having a hard time upgrading our orb aws-ecr from v8 to v9, is anyone aware of a simple migration guide? There’s definitely more than just renaming some jobs and properties. The best we could do still ended wi…

---

## [Executor from private AWS ECR with OIDC without IAM keys](https://discuss.circleci.com/t/executor-from-private-aws-ecr-with-oidc-without-iam-keys/49947)

<div class="topic-metadata">

**Author:** [@oleksandrsv](https://discuss.circleci.com/u/oleksandrsv)\
**Replies:** 0\
**Last updated:** [November 29, 2023, 9:39am UTC](https://discuss.circleci.com/t/executor-from-private-aws-ecr-with-oidc-without-iam-keys/49947 "2023-11-29T09:39:43Z")

</div>

Hi team, is it possible to pull executor from AWS ECR repo using OIDC role and not using IAM keys? As executor it is a first step, I can not imagine where I can provision OIDC role and assume it. I tried to run execut…

---

## [Why does the circleci/aws-ecr@8.2.1 orb push multiple artifacts to a private repository?](https://discuss.circleci.com/t/why-does-the-circleci-aws-ecr-8-2-1-orb-push-multiple-artifacts-to-a-private-repository/48772)

<div class="topic-metadata">

**Author:** [@adam-alula](https://discuss.circleci.com/u/adam-alula)\
**Replies:** 7\
**Last updated:** [August 1, 2023, 8:33pm UTC](https://discuss.circleci.com/t/why-does-the-circleci-aws-ecr-8-2-1-orb-push-multiple-artifacts-to-a-private-repository/48772 "2023-08-01T20:33:25Z")

</div>

Hello all. I use the aws-ecr@8.2.1 orb, specifically the build-and-push-image job to send Docker images to a private repository in the AWS ECR. When looking at my repository, I noticed that each execution of the build-an…

---

## [CircleCI Docker ECR orb ERROR: failed to solve: failed to compute cache key: "/init.sh" not found](https://discuss.circleci.com/t/circleci-docker-ecr-orb-error-failed-to-solve-failed-to-compute-cache-key-init-sh-not-found/47718)

<div class="topic-metadata">

**Author:** [@fatflamingo](https://discuss.circleci.com/u/fatflamingo)\
**Replies:** 2\
**Last updated:** [April 11, 2023, 5:29pm UTC](https://discuss.circleci.com/t/circleci-docker-ecr-orb-error-failed-to-solve-failed-to-compute-cache-key-init-sh-not-found/47718 "2023-04-11T17:29:38Z")

</div>

I am utilizing CircleCI and ECR orb to build my docker image and push it to Elastic Container Registry ( ECR ) but i keep running into the following error: ERROR: failed to solve: failed to compute cache key: "/init.sh" …

---

## [Rust Project: Build and Push image to ECR](https://discuss.circleci.com/t/rust-project-build-and-push-image-to-ecr/46790)

<div class="topic-metadata">

**Author:** [@bitterman](https://discuss.circleci.com/u/bitterman)\
**Replies:** 1\
**Last updated:** [January 20, 2023, 6:25am UTC](https://discuss.circleci.com/t/rust-project-build-and-push-image-to-ecr/46790 "2023-01-20T06:25:58Z")

</div>

Hi, I am trying to build my rust project and push it against a repository in aws ecr using the orb aws-ecr: circleci/aws-ecr@8.1.2. The problem is that in my cargo.toml file it references private dependencies, I have li…

---

## [Provided region\_name 'AWS\_REGION' doesn't match a supported format](https://discuss.circleci.com/t/provided-region-name-aws-region-doesnt-match-a-supported-format/45697)

<div class="topic-metadata">

**Author:** [@Tolosa527](https://discuss.circleci.com/u/Tolosa527)\
**Replies:** 2\
**Last updated:** [October 18, 2022, 7:56am UTC](https://discuss.circleci.com/t/provided-region-name-aws-region-doesnt-match-a-supported-format/45697 "2022-10-18T07:56:05Z")

</div>

Hello! I am trying to push an image to AWS-ECR but in the log I have the following error: Provided region\_name ‘AWS\_REGION’ doesn’t match a supported format This is an snippet of how I configure the .yml file - aws-e…

---

## [How do I use a script's output to conditionally run jobs?](https://discuss.circleci.com/t/how-do-i-use-a-scripts-output-to-conditionally-run-jobs/45719)

<div class="topic-metadata">

**Author:** [@ChrisPage-AT](https://discuss.circleci.com/u/ChrisPage-AT)\
**Replies:** 3\
**Last updated:** [October 12, 2022, 2:28pm UTC](https://discuss.circleci.com/t/how-do-i-use-a-scripts-output-to-conditionally-run-jobs/45719 "2022-10-12T14:28:37Z")

</div>

I am building a docker container, running tests on the code, pushing the container to Amazon’s ECR, then deploying to Amazon’s EKS. Sometimes we do not want to deploy the container right away. Rather than re-build/test…

---

## [AWS ECR error when pushing image](https://discuss.circleci.com/t/aws-ecr-error-when-pushing-image/45616)

<div class="topic-metadata">

**Author:** [@piotr](https://discuss.circleci.com/u/piotr)\
**Replies:** 2\
**Last updated:** [October 5, 2022, 6:44am UTC](https://discuss.circleci.com/t/aws-ecr-error-when-pushing-image/45616 "2022-10-05T06:44:55Z")

</div>

I’m using the aws-ecr orb version 8.1.2 and running build-and-push-image When the image is supposed to be pushed I get an error: ERROR: unexpected status: 403 Forbidden I made sure that the AWS account used has the …

---

## [Pushing to AWS ECR repo using ecr orb 8.1.2](https://discuss.circleci.com/t/pushing-to-aws-ecr-repo-using-ecr-orb-8-1-2/44855)

<div class="topic-metadata">

**Author:** [@CamrenLandry](https://discuss.circleci.com/u/CamrenLandry)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 6:50pm UTC](https://discuss.circleci.com/t/pushing-to-aws-ecr-repo-using-ecr-orb-8-1-2/44855 "2022-07-28T18:50:23Z")

</div>

\#!/bin/bash -eo pipefail #!/bin/bash PARAM\_REGION=$(eval echo “${PARAM\_REGION}”) PARAM\_ACCOUNT\_URL=“${!PARAM\_REGISTRY\_ID}.dkr.ecr.${PARAM\_REGION}.amazonaws.com” ECR\_COMMAND=“ecr” if \[ “$PARAM\_PUBLIC\_REGISTRY” == “1”…

---

## [The canonical way to deploy Rails app to ECR with buildpacks](https://discuss.circleci.com/t/the-canonical-way-to-deploy-rails-app-to-ecr-with-buildpacks/44457)

<div class="topic-metadata">

**Author:** [@mladenoff](https://discuss.circleci.com/u/mladenoff)\
**Replies:** 0\
**Last updated:** [June 16, 2022, 11:29pm UTC](https://discuss.circleci.com/t/the-canonical-way-to-deploy-rails-app-to-ecr-with-buildpacks/44457 "2022-06-16T23:29:55Z")

</div>

We are changing hosting platforms and due to time restrictions, we want to continue to build our Rails app with buildpacks rather than going fully to a Dockerfile. We are aren’t looking to just push the code to AWS and …

---

## [How do I trigger aws-ecr/build-and-push-image on every merge into master?](https://discuss.circleci.com/t/how-do-i-trigger-aws-ecr-build-and-push-image-on-every-merge-into-master/41013)

<div class="topic-metadata">

**Author:** [@mlanuk](https://discuss.circleci.com/u/mlanuk)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 11:30am UTC](https://discuss.circleci.com/t/how-do-i-trigger-aws-ecr-build-and-push-image-on-every-merge-into-master/41013 "2021-08-20T11:30:10Z")

</div>

I keep running into build errors with the following file and not sure how to correct it: orbs: aws-ecr: circleci/aws-ecr@7.0.0 workflows: build-and-test-app: jobs: - build-and-test-flask build\_and\_push\_…

---

## [ECR, Docker, Tagging](https://discuss.circleci.com/t/ecr-docker-tagging/40809)

<div class="topic-metadata">

**Author:** [@JoeC](https://discuss.circleci.com/u/JoeC)\
**Replies:** 1\
**Last updated:** [August 1, 2021, 6:37pm UTC](https://discuss.circleci.com/t/ecr-docker-tagging/40809 "2021-08-01T18:37:54Z")

</div>

I’ve been tasked (lucky me) with converting our Jenkins jobs over to Circleci. I’m very inexperienced with this, as I’m not a devops engineer, so I’m probably off on some of my fundamentals. Everything is going extremel…

---

## [Rollback via rerun deploy job](https://discuss.circleci.com/t/rollback-via-rerun-deploy-job/39483)

<div class="topic-metadata">

**Author:** [@wangxiaoyou1993](https://discuss.circleci.com/u/wangxiaoyou1993)\
**Replies:** 2\
**Last updated:** [April 20, 2021, 9:42am UTC](https://discuss.circleci.com/t/rollback-via-rerun-deploy-job/39483 "2021-04-20T09:42:36Z")

</div>

I currently use CircleCI for building docker images, pushing to ECR and deploying to ECS. I want to be able to manually rollback a deploy if any issues are detected on production. The way I can think of is to rerun the…

---

## [Branch or tag version as tag name for aws-ecr orb](https://discuss.circleci.com/t/branch-or-tag-version-as-tag-name-for-aws-ecr-orb/39398)

<div class="topic-metadata">

**Author:** [@elektruver](https://discuss.circleci.com/u/elektruver)\
**Replies:** 1\
**Last updated:** [March 19, 2021, 12:13am UTC](https://discuss.circleci.com/t/branch-or-tag-version-as-tag-name-for-aws-ecr-orb/39398 "2021-03-19T00:13:07Z")

</div>

Hello, I try to setup custom tag for specific branch/tag. I want to push to ECR only when branch is staging or tag. In general it should works like this one workflows: version: 2 backend: jobs: - aws-ecr/…

---

## [AWS ECR Pull Role and Profile](https://discuss.circleci.com/t/aws-ecr-pull-role-and-profile/33432)

<div class="topic-metadata">

**Author:** [@amartin-sharpr](https://discuss.circleci.com/u/amartin-sharpr)\
**Replies:** 0\
**Last updated:** [November 18, 2019, 11:23pm UTC](https://discuss.circleci.com/t/aws-ecr-pull-role-and-profile/33432 "2019-11-18T23:23:08Z")

</div>

I think this is slightly related to https://discuss.circleci.com/t/different-aws-keys-per-environment/4203/5. I’m not seeing a way to set the assumed role or source profile values in my config.yml file. Is that somethin…

---

## [Deploying to AWS Fargate sequentially](https://discuss.circleci.com/t/deploying-to-aws-fargate-sequentially/33379)

<div class="topic-metadata">

**Author:** [@luckyvalentine](https://discuss.circleci.com/u/luckyvalentine)\
**Replies:** 1\
**Last updated:** [November 16, 2019, 7:58pm UTC](https://discuss.circleci.com/t/deploying-to-aws-fargate-sequentially/33379 "2019-11-16T19:58:03Z")

</div>

Hi Friends. I have a few services (containers) that get deployed to fargate. The problem is that the new service B requires the new service A to be up and running… as it the case, service B beats out service A by a han…

---

## [Aws-ecr@6.1.0 Fails to push image to ECR after a successful login](https://discuss.circleci.com/t/aws-ecr-6-1-0-fails-to-push-image-to-ecr-after-a-successful-login/31384)

<div class="topic-metadata">

**Author:** [@arsia](https://discuss.circleci.com/u/arsia)\
**Replies:** 4\
**Last updated:** [July 17, 2019, 6:31pm UTC](https://discuss.circleci.com/t/aws-ecr-6-1-0-fails-to-push-image-to-ecr-after-a-successful-login/31384 "2019-07-17T18:31:26Z")

</div>

So i’m having a problem pushing an image to an AWS ECR under my account. I am using aws-ecr orb version@6.1.0. As per job definition in official documentation everything goes fine and it logs into my AWS account as wel…

---

## [Aws ecr authentication issue: The security token included in the request is invalid](https://discuss.circleci.com/t/aws-ecr-authentication-issue-the-security-token-included-in-the-request-is-invalid/22190)

<div class="topic-metadata">

**Author:** [@whatch](https://discuss.circleci.com/u/whatch)\
**Replies:** 3\
**Last updated:** [May 8, 2018, 3:16pm UTC](https://discuss.circleci.com/t/aws-ecr-authentication-issue-the-security-token-included-in-the-request-is-invalid/22190 "2018-05-08T15:16:55Z")

</div>

I’ve got two projects, both of which build a docker image and then push that image to ECR. One project builds and pushes successfully, but the other fails when trying to obtain an ecr login with: An error occurred (Unr…

---

## [Useful ECS deploy script](https://discuss.circleci.com/t/useful-ecs-deploy-script/12496)

<div class="topic-metadata">

**Author:** [@koblas](https://discuss.circleci.com/u/koblas)\
**Replies:** 4\
**Last updated:** [April 26, 2018, 1:27am UTC](https://discuss.circleci.com/t/useful-ecs-deploy-script/12496 "2018-04-26T01:27:28Z")

</div>

Just passing this along since after a few iterations of the original Go project example script have found this version to be a bit more useful. A few things to note is: Takes a command line arguments so you can depl…

---

## [ECS Deploy Script error "Service not found"](https://discuss.circleci.com/t/ecs-deploy-script-error-service-not-found/4286)

<div class="topic-metadata">

**Author:** [@danielhopper](https://discuss.circleci.com/u/danielhopper)\
**Replies:** 7\
**Last updated:** [January 8, 2018, 10:48am UTC](https://discuss.circleci.com/t/ecs-deploy-script-error-service-not-found/4286 "2018-01-08T10:48:46Z")

</div>

I’m trying to use the deploy.sh script from the Go Example project that is described in the ECS integration page. Current it isn’t working with an error of A client error (ServiceNotFoundException) occurred when calli…

---

## [What are the minimum permissions required for a CircleCI IAM user to push a docker image to a AWS cluster](https://discuss.circleci.com/t/what-are-the-minimum-permissions-required-for-a-circleci-iam-user-to-push-a-docker-image-to-a-aws-cluster/19032)

<div class="topic-metadata">

**Author:** [@lunafi-dorian](https://discuss.circleci.com/u/lunafi-dorian)\
**Replies:** 2\
**Last updated:** [December 30, 2017, 9:38pm UTC](https://discuss.circleci.com/t/what-are-the-minimum-permissions-required-for-a-circleci-iam-user-to-push-a-docker-image-to-a-aws-cluster/19032 "2017-12-30T21:38:01Z")

</div>

The Continuous Deployment (I know its from 1.0, couldn’t find anything from 2.0) mention the following permissions need to be granted for a circleCI IAM user: Permission - The ECS Container agent(s) need to have acces…

---

## [Is there a way to do pre: or similar at the docker: stage? for ECR?](https://discuss.circleci.com/t/is-there-a-way-to-do-pre-or-similar-at-the-docker-stage-for-ecr/15703)

<div class="topic-metadata">

**Author:** [@kidbrax](https://discuss.circleci.com/u/kidbrax)\
**Replies:** 12\
**Last updated:** [September 26, 2017, 12:30am UTC](https://discuss.circleci.com/t/is-there-a-way-to-do-pre-or-similar-at-the-docker-stage-for-ecr/15703 "2017-09-26T00:30:35Z")

</div>

I'd like to run the ECR login command and extract the username/password. Then I could use the normal private docker image settings on the docker: section. Is there a way to do something like that? I.d like to do this: …

---

## [AWS Container Server - No Email for Login](https://discuss.circleci.com/t/aws-container-server-no-email-for-login/14664)

<div class="topic-metadata">

**Author:** [@WB3Tech](https://discuss.circleci.com/u/WB3Tech)\
**Replies:** 0\
**Last updated:** [July 22, 2017, 8:03pm UTC](https://discuss.circleci.com/t/aws-container-server-no-email-for-login/14664 "2017-07-22T20:03:53Z")

</div>

Hey All! I'm trying to deploy to AWS ECR and when I use the following command in my shell script, I get asked for an email, even thought I have the --no-include-email. eval $(aws ecr get-login --no-include-email --re…

---

## [Builds pushed to ECR are in a register/deregister loop](https://discuss.circleci.com/t/builds-pushed-to-ecr-are-in-a-register-deregister-loop/8947)

<div class="topic-metadata">

**Author:** [@youmustfight](https://discuss.circleci.com/u/youmustfight)\
**Replies:** 0\
**Last updated:** [December 19, 2016, 6:22pm UTC](https://discuss.circleci.com/t/builds-pushed-to-ecr-are-in-a-register-deregister-loop/8947 "2016-12-19T18:22:16Z")

</div>

So everything looks good. My task definition, service, and docker repository on ECR are all being updated which triggers the rolling restarts on my instances. However, whenever it spins up a task using the image built …

---

## [AWS ECR Integration](https://discuss.circleci.com/t/aws-ecr-integration/1621)

<div class="topic-metadata">

**Author:** [@DallanQ](https://discuss.circleci.com/u/DallanQ)\
**Replies:** 4\
**Last updated:** [October 6, 2016, 4:51am UTC](https://discuss.circleci.com/t/aws-ecr-integration/1621 "2016-10-06T04:51:28Z")

</div>

You might want to mention in You might want to mention in http://blog.circleci.com/circleci-aws-ecrecs/ that before integrating with ECR people need to upgrade the aws cli because the version that's on the machines by…

[Next page](https://discuss.circleci.com/tag/ecr/23.md?match_all_tags=true&page=1&tags%5B%5D=ecr)
