Using docker image from AWS ECR with MFA enabled for AWS account

[Anusha Bathala]

Hello,

For my Bitbucket pipeline, I am using a docker image hosted in AWS ECR as the build environment. Is it possible to fetch the docker image from AWS ECR if the AWS account has Multi Factor Authentication enabled?

Regards,

Anusha

[ktomk]

Yes, as long as the policies allow access via API credentials. For pipelines it is recommended practice to have credentials (AWS API key and secret) specific for the pipeline case so they are easier to manage (e.g. rotate them, switch teams etc.).

You might already be aware of this, so linking this for reference can't hurt:

• *https://support.atlassian.com/bitbucket-cloud/docs/use-docker-images-as-build-environments/ - see the section named Private images hosted by AWS ECR (EC2 Container Registry)
• https://community.atlassian.com/t5/Bitbucket-questions/Pipelines-Pulling-docker-images-from-a-Amazon-ECR-repository/qaq-p/393415

Is this the information you're looking for?

[Brian Sterling]

He specifically called out "MFA" or "multi-factor authentication" which means having a hardware device (or virtual device) with a temporary password, like you might have on your mobile device that generates a new 6 digit code every 30 seconds.

These articles don't mention anything about MFA.