Terraform AWS ECR Repo

Creates a basic ECR repository.

It's highly suggested to provide your own lifecycle policy and IAM role policy.

By default, this module will not create an IAM role policy to attach to the ECR repo that is created with this module.

Please see AWS Documentation on Lifecycle Policies for example lifecycle policies.

The default lifecycle policy included in this module will keep the latest tagged image and delete all untagged images after 14 days.

Usage

Put an example usage of the module here

module "example" {
  source = "trussworks/ecr-repo/aws"

  container_name = "example"
}

Requirements

Name	Version
terraform	~> 1.4.0
aws	~> 4.65.0

Providers

Name	Version
aws	4.65.0

Modules

No modules.

Resources

Name	Type
aws_ecr_lifecycle_policy.main	resource
aws_ecr_repository.main	resource
aws_ecr_repository_policy.main	resource

Inputs

Name	Description	Type	Default	Required
container_name	Container name.	string	n/a	yes
ecr_policy	ECR IAM permission policy for external access.	string	""	no
encryption_configuration	ECR encryption configuration. By default, this uses AWS's server-side encryption using AES-256	object({ encryption_type = string kms_key = any })	null	no
force_delete	Whether to delete the repository even if it contains images	bool	false	no
image_tag_mutability	Whether allow image tags to be mutable.	string	"IMMUTABLE"	no
lifecycle_policy	ECR repository lifecycle policy document. Used to override the default policy.	string	""	no
scan_on_push	Scan image on push to repo.	bool	true	no
tags	Additional tags to apply.	map(any)	{}	no

Outputs

Name	Description
arn	Full ARN of the repository.
repo_url	The URL for the repository created.

Developer Setup

Install dependencies (macOS)

brew install pre-commit tfenv terraform-docs
pre-commit install --install-hooks