Back to Amazon EC2 Container Registry

Amazon ECR Immutable Tags

5 minutes 5 Questions

Immutable tags are a feature in Amazon ECR that allows developers to prevent overwriting or deleting Docker image tags. By using this feature, developers can create a consistent deployment pipeline and ensure that once an image is tagged and pushed to the repository, it cannot be inadvertently modi…

Test mode:
Start practice test
AWS Certified Solutions Architect - Amazon ECR Immutable Tags Example Questions

Test your knowledge of Amazon ECR Immutable Tags

Question 1

A DevOps team needs to ensure that existing image tags in an Amazon ECR repository cannot be overwritten by subsequent pushes. What should they enable?

Correct Answer: Enable ECR image tag immutability

Amazon ECR supports image tag immutability, which prevents pushing a new image with a tag that already exists in the repository. When enabled, any attempt to overwrite an existing tag fails, protecting against unintended overwrites. Amazon S3 versioning and MFA Delete apply to S3 objects, not ECR. AWS WAF protects web applications and has no effect on ECR image push behavior.

Question 2

An organization requires that images stored in their Amazon ECR repository only be deleted when they reach 180 days of age. Which approach should they use?

Correct Answer: Configure ECR Lifecycle Policy

Configuring an ECR Lifecycle Policy allows automatic removal of images based on specified criteria, such as age. Enabling Image Immutability prevents overwriting but does not help deleting based on age. Manual deletion, S3 Lifecycle Policy, versioning, and Glacier are not related to the mentioned requirements.

Question 3

Your application uses Amazon ECR to store Docker container images. You want to ensure that once an image is pushed to the repository, it cannot be removed or replaced. How can you achieve this?

Correct Answer: Enable ECR Image Immutability and configure an ECR Lifecycle Policy

ECR Image Immutability prevents overwriting image tags, and an ECR Lifecycle Policy helps manage image retention. S3 versioning, manual deletion, unique image tags, MFA Delete, and WAF configuration do not achieve the desired result of preventing the removal or replacement of images

More Amazon ECR Immutable Tags questions
15 questions (total)
Start 15 question test