You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the ECR approach is centralized on the Shared account. That should be changed to a per-environment (account) approach.
That way every account would be in charge of keeping ECR in control and only resources in the same account would be allowed different kinds of access to such ECR repos.
Images will be built and pushed to the dev ECR. Then, via ECR cross-account/cross-region replication, those images will be replicated to other accounts.
For instance, DEV could replicate to STG, and STG could replicate to PRD; or alternatively the replication between STG and PRD could be conditional, based on tags or on a different logic.
Expected Behavior
Use Case
Describe Ideal Solution
Alternatives Considered
Additional Context
The text was updated successfully, but these errors were encountered:
Describe the Feature
Currently the ECR approach is centralized on the Shared account. That should be changed to a per-environment (account) approach.
That way every account would be in charge of keeping ECR in control and only resources in the same account would be allowed different kinds of access to such ECR repos.
Images will be built and pushed to the dev ECR. Then, via ECR cross-account/cross-region replication, those images will be replicated to other accounts.
For instance, DEV could replicate to STG, and STG could replicate to PRD; or alternatively the replication between STG and PRD could be conditional, based on tags or on a different logic.
Expected Behavior
Use Case
Describe Ideal Solution
Alternatives Considered
Additional Context
The text was updated successfully, but these errors were encountered: