How to allow Bitbucket-Pipelines to pull images from Amazon EC2 container service (ECR)?

Dean Kayton

What I have tried:

- I can successfully push to Amazon ECR (details in this answer I posted on Stack Overflow)
- I am failing to pull the above image in a subsequent pipeline (see example).

Example bitbucket-pipeline.yml

image:
  name: <ecr-registry-address>/<repository>:<tag>
    aws:
      access-key: ${AWS_ACCESS_KEY_ID}
      secret-key: ${AWS_SECRET_ACCESS_KEY}

pipelines:
  default:
    - step:
        script:
        - echo 'Hello World'

The error I get back:

Finally:

In order to push to the repository, I already setup IAM roles for the bitbucket-pipelines account (AmazonEC2ContainerRegistryPowerUser). Is there any other setup required?

Philip Hodder

Hi Dean,

If you'd like to use environment variables for your ECR image you need to change your YAML to look like this:

image:
  name: <imagename>
  aws:
    access-key: $AWS_ACCESS_KEY_ID
    secret-key: $AWS_SECRET_ACCESS_KEY
pipelines:
  default:
    - step:
        script:
          - echo 'Hello world'
...

Specifically removing the curly braces around your environment variables and realigning the whitespace (though, that may have been copy/paste).

Hope that helps!

Phil