Integrating AWS ECR

Use Upswift to deploy images from your AWS ECR account onto your edge devices

Upswift container update is able to pull images from your AWS ECR and deploy them on your devices. To do so the container update tool needs the following configuration:

  • AWS ACCESS KEY ID

  • AWS SECRET KEY

  • The ECR registry server address

Configuring AWS ECR with Upswift update container tool

  1. In the Upswift platform go to the Create Update Flow tab in the Update page

  2. Drag the Deploy Container Block into the Update Flow and click on the Block.

  3. Select the Private Repository checkbox.

  4. Click on the Add Account button and select Amazon ECR in the Registry Provider dropdown.

4. Under "Account Display Name" enter any name you would. 5. To fill the "Access Key ID" and "Access Key Secret" parameters, please go over the next steps: (ECR Container Updates need AWS Access keys in order to be able to pull the image from your repositories)

  1. In the AWS Management Console go to the IAM page, and click on Users in the navigation bar.

  2. Click on the Add user button.

  3. Enter a username (for example: "upswift-container-updates") and choose Programmatic access.

  4. Select "Attach existing policies directly". In the policies search for "AmazonEC2ContainerRegistryReadOnly" policy and select it. Set the permissions boundary to "Create user without a permissions boundary"

  5. You can add any tags that you wish.

  6. Finish reviewing and create the user.

  7. You will be prompted to save the Access ID and Secret Key. Save these - Upswift needs these fields and you won't be able to access the Secret Key again.

6. Enter the given "Access Key ID" and "Access Key Secret" on the Upswift page. 7. Under the "Registry Address" enter your Registry server address from any repository URI For example: 588393815952.dkr.ecr.us-east-2.amazonaws.com (In most cases this will be aws-account-id.dkr.ecr.region.amazonaws.com):

8. Click on "Save Account".

Deploying an update

When deploying an update, check the Private Repository checkbox and select the wanted account. In the Repository Name enter the URI from the AWS ECR Repository - see image.

Last updated