Enable Cross-Region Replication

01 Sign in to the AWS Management Console.

02 Navigate to Amazon ECR console at https://console.aws.amazon.com/ecr.

03 In the left navigation panel, under Amazon ECR, select Registries to access the configuration settings available for your private ECR registries. Amazon ECR private registries are used to host your container images in a highly available and scalable environment.

04 On the Registries page, in the Private section, check the Cross-region replication configuration attribute status. If the attribute status is set to Disabled, the Cross-Region Replication feature is not enabled for the container images available within your private Amazon ECR repositories.

05 Change the AWS cloud region from the navigation bar and repeat the audit process for other AWS regions.

01 Run describe-registry command (OSX/Linux/UNIX) to describe the configuration settings (including replication settings) available for your Amazon ECR registry in the selected AWS region:

aws ecr describe-registry
  --region us-east-1

02 Based on your Amazon ECR registry configuration, if the feature is disabled, the command should return one of the following outputs:

1. If the command output does not describe any rules for the "replicationConfiguration" object, as shown in the example below, the Cross-Region Replication feature is not enabled for the container images available within your private Amazon ECR repositories:
   {
     "registryId": "123456789012",
     "replicationConfiguration": {
       "rules": []
     }
   }
   

2. If the describe-registry command output returns rules for the "replicationConfiguration" object but the "registryId" values are not identical (i.e. only Cross-Account Replication is enabled), as shown in the example below, the Cross-Region Replication feature is not enabled for your Amazon ECR container images:
   {
     "registryId": "123456789012",
     "replicationConfiguration": {
       "rules": [
         {
           "destinations": [
             {
               "region": "us-west-2",
               "registryId": "123412341234"
             }
           ]
         }
       ]
     }
   }
   

03 Change the AWS region by updating the --region command parameter value and repeat steps no. 1 and 2 to perform the audit process for other regions.

01 Sign in to the AWS Management Console.

02 Navigate to Amazon ECR console at https://console.aws.amazon.com/ecr.

03 In the left navigation panel, under Amazon ECR, select Registries to access the configuration settings available for your private ECR registries.

04 On the Registries page, select the Private configuration box and choose Edit.

05 On the Edit registry page, in the Replication settings section, perform the following actions:

1. Toggle Enabled under Cross-region replication to enable the Cross-Region Replication feature for your Amazon ECR registry.
2. elect one or more AWS regions as destination targets from the Destination regions dropdown list.
3. Choose Save to apply the changes. From now on, every time you push an image to your private ECR repository (or call the replicate API explicitly) Amazon ECR automatically replicates the image. If the repository does not yet exist in the destination region, Cross-Region Replication automatically creates it.

06 Change the AWS cloud region from the navigation bar to repeat the remediation process for other AWS regions.

01 Define the replication configuration for your Amazon ECR registry by adding the destination account and region(s) where you want Amazon ECR to copy your images to. If Cross-Account Replication is enabled in the selected AWS region, make sure that you add the cross-account destination details as well. Save your configuration document to a JSON file named replication-configuration.json. The following replication configuration example, enable Cross-Region Replication feature to make copies of your private images in the US West (Oregon) region:

{
  "rules": [
    {
      "destinations": [
        {
          "region": "us-west-2",
          "registryId": "123456789012"
        }
      ]
    }
  ]
}

02 Run put-replication-configuration command (OSX/Linux/UNIX) to enable the Cross-Region Replication feature within the selected AWS region by updating the Amazon ECR registry replication configuration with the information defined at the previous step:

aws ecr put-replication-configuration
  --region us-east-1
  --replication-configuration file://replication-configuration.json

03 The command output should return the new replication configuration for Amazon ECR registry:

{
  "replicationConfiguration": {
    "rules": [
      {
        "destinations": [
          {
            "region": "us-west-2",
            "registryId": "123456789012"
          }
        ]
      }
    ]
  }
}

04 Change the AWS region by updating the --region command parameter value and repeat steps no. 1 – 3 to perform the remediation process for other regions.