Skip to content

aws.ecr.describe_repository_creation_templates

Example SQL Queries

SELECT * FROM
aws.ecr.describe_repository_creation_templates;

Description

Returns details about the repository creation templates in a registry. The prefixes request parameter can be used to return the details for a specific repository creation template.

Table Definition

Column NameColumn Data Type
prefixes Input Column

The repository namespace prefixes associated with the repository creation templates to describe. If this value is not specified, all repository creation templates are returned.

VARCHAR[]
Show child fields
prefixes[]
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

registry_id

The registry ID associated with the request.

VARCHAR
repository_creation_templates

The details of the repository creation templates.

STRUCT(
"prefix" VARCHAR,
"description" VARCHAR,
"encryption_configuration" STRUCT(
"encryption_type" VARCHAR,
"kms_key" VARCHAR
),
"resource_tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"image_tag_mutability" VARCHAR,
"repository_policy" VARCHAR,
"lifecycle_policy" VARCHAR,
"applied_for" VARCHAR[],
"custom_role_arn" VARCHAR,
"created_at" TIMESTAMP_S,
"updated_at" TIMESTAMP_S
)[]
Show child fields
repository_creation_templates[]
Show child fields
repository_creation_templates[].applied_for[]
repository_creation_templates[].created_at

The date and time, in JavaScript date format, when the repository creation template was created.

repository_creation_templates[].custom_role_arn

The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.

repository_creation_templates[].description

The description associated with the repository creation template.

repository_creation_templates[].encryption_configuration

The encryption configuration associated with the repository creation template.

Show child fields
repository_creation_templates[].encryption_configuration.encryption_type

The encryption type to use.

If you use the KMS encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide.

If you use the AES256 encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.

repository_creation_templates[].encryption_configuration.kms_key

If you use the KMS encryption type, specify the KMS key to use for encryption. The full ARN of the KMS key must be specified. The key must exist in the same Region as the repository. If no key is specified, the default Amazon Web Services managed KMS key for Amazon ECR will be used.

repository_creation_templates[].image_tag_mutability

The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.

repository_creation_templates[].lifecycle_policy

The lifecycle policy to use for repositories created using the template.

repository_creation_templates[].prefix

The repository namespace prefix associated with the repository creation template.

repository_creation_templates[].repository_policy

he repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.

repository_creation_templates[].resource_tags[]
Show child fields
repository_creation_templates[].resource_tags[].key

One part of a key-value pair that make up a tag. A key is a general label that acts like a category for more specific tag values.

repository_creation_templates[].resource_tags[].value

A value acts as a descriptor within a tag category (key).

repository_creation_templates[].updated_at

The date and time, in JavaScript date format, when the repository creation template was last updated.