Can't pull Packages image from AWS ECS Task

[Sindi Ziu]

Hello,

I hope you're doing well.

I pushed an image to the new Bitbucket Packages, and added its URI to a new Task Definition in my AWS ECS cluster. Tried to deploy this task through a service and I'm getting this error:

Task stopped at: 2025-12-18T13:25:28.020Z

CannotPullContainerError: pull image manifest has been retried 7 time(s): failed to resolve ref <image-uri>: failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://crg.apkg.io/auth/registry-token?scope=repository%3Apcbf%2F<repo>%3Apull&service=crg.apkg.io: 401 Unauthorized


I dont see anything regarding authentication within the Packages page, only a digest string and URI, how do i authenticate my Task to pull it?

Thank you in advance,

Sindi

[Syahrul]

Hey @Sindi Ziu 

Welcome to the community.

Pushing or pulling packages requires you to authenticate through Docker login as mentioned in our documentation here.

Pushing to and pulling from the container registry requires you to authenticate your client with an Atlassian API token. If you are using the Docker CLI, use the following command, replacing the default content with your username and Atlassian email address, to configure your credentials:

docker login --username <your_atlassian_account_email_address> crg.apkg.io

When prompted for a password, enter your API token. Once you are authenticated, your credentials will be stored on your machine and used for all future container registry operations.

I hope this helps.

Regards,
Syahrul