Back to Amazon EC2 Container Registry

ECR Lifecycle Policies

5 minutes 5 Questions

ECR Lifecycle Policies allow users to define and automate the lifecycle of their Amazon ECR images, which helps in managing the image storage and controlling costs efficiently. Users can create policies that specify rules and action parameters, such as the maximum age of an image or the maximum num…

Test mode:
Start practice test
AWS Certified Solutions Architect - ECR Lifecycle Policies Example Questions

Test your knowledge of ECR Lifecycle Policies

Question 1

You have an ECR repository with multiple image versions. You want to create a lifecycle policy that only preserves the 5 most recently pushed images. Which Json field and value would you use?

Correct Answer: {"imageCountMoreThan": 5}

In ECR Lifecycle Policies, 'imageCountMoreThan' is the correct field to use in this scenario, and a value of 5 indicates to just keep the 5 most recently pushed images. The other fields listed are not valid options within an Amazon ECR Lifecycle Policy.

Question 2

You are creating an AWS ECR lifecycle policy for a Production repository. You must ensure that images tagged 'prod' are never removed by the policy, while allowing cleanup of other images. What should you configure?

Correct Answer: Configure expiration rules that never match images tagged 'prod'—for example, expire only untagged images and/or tagged images with specific prefixes other than 'prod' (tagStatus: 'untagged' and/or tagStatus: 'tagged' with a tagPrefixList that excludes 'prod'). Images not matched by any rule are retained.

AWS ECR lifecycle policies only define which images to expire; there is no 'retain' action and no 'imageTagStatus' field. Images that are not matched by any lifecycle rule are kept indefinitely. To ensure 'prod'-tagged images are never removed, scope your expiration rules so they select only untagged images and/or tagged images with prefixes that do not include 'prod'. By excluding 'prod' from all selections, those images are never targeted by an expire action and are therefore retained.

Question 3

An Amazon ECR repository tags images as draft, staging, or production. You must retain all production images indefinitely and automatically delete draft and staging images that are older than 7 days. Which lifecycle policy approach satisfies this requirement?

Correct Answer: Prevent image removal when imageTagStatus is 'production', expunge images older than 7 days with other imageTagStatus.

In Amazon ECR lifecycle policies, images are only removed when they match a rule whose action is 'expire'. To retain production images indefinitely, you simply ensure no expire rule selects them. Implement two rules: one with tagStatus 'tagged', tagPrefixList ['draft'], and selection sinceImagePushed > 7 days; and another identical rule for tagPrefixList ['staging']. Do not include 'production' in any tagPrefixList. Because production images are never selected by an expire rule, they are not deleted, while draft and staging images older than 7 days are removed automatically.

More ECR Lifecycle Policies questions
15 questions (total)
Start 15 question test