> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ale.run/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS ECR

> You can configure AWS **Elastic Container Registry** as the repository for storing images built in `ale` and for use during deployment.

***

## Create AWS IAM User

### Create User

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr01.png" />
</Frame>

> Access the `IAM > Access management > Users` page and click `Create user`.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr02.png" />
</Frame>

> Enter your desired **User name** and proceed to the next step.

### Grant Permissions

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr03.png" />
</Frame>

> Under permission options, select **Attach policies directly**, search for **AmazonEC2ContainerRegistryFullAccess**, check the checkbox, and proceed to the next step.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr04.png" />
</Frame>

> Click `Create user` without any additional settings.

## Generate Access Key

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr05.png" />
</Frame>

> On the user’s page, click `Create access key` in the Access keys section of the **Security credentials** tab.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr06.png" />
</Frame>

> On the following screen, select **Application running outside AWS**.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr07.png" />
</Frame>

> Enter an appropriate description tag and click `Create access key`.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr08.png" />
</Frame>

> On the next screen, you can retrieve the generated **Access key** and **Secret access key**.

## Create Console Login URL

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr09.png" />
</Frame>

> Click `Enable console access` in the Console sign-in section of the **Security credentials** tab on the user's page.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr10.png" />
</Frame>

> Select **Enable** for console access, choose **Custom password** for password settings, enter your desired password, and click `Enable console access`.

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr11.png" />
</Frame>

> Using the generated Console login URL, you can access the container registry by entering your username and console password.

## Create AWS ECR

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/operations/images/ecr13.png" />
</Frame>

> On the Elastic Container Registry page, click `Create` to create a repository. On the next screen, the`[ID].dkr.ecr.[region].amazonaws.com` portion of the Repository name field will be used as the Access URL to connect ECR to `ale`.

## Connect to ale

<Frame>
  <img className="block rounded-md" src="https://files.cloudtype.io/ale-docs/setup/eks/images/en/05_02.png" />
</Frame>

> In the operations system, go to the Settings tab on the cluster page and click `Connect Container Repository`. In the modal that appears, enter the following values and click `Connect`.

* **Repository Provider**: AWS Elastic Container Registry
* [Access URL](/en/registry/aws-ecr#create-aws-ecr): `[ID].dkr.ecr.[region].amazonaws.com`
* **aws access key ID**: Access key
* **aws secret access key**: Secret access key
* **region**: Region identifier where ECR is located **(e.g., us-east-1)**