Architecture World 4 · Shipped in Containers · Stage 4

Images and Registries

Images through the registry's rules: which stay, which are refused, which are scanned, which reach Ireland, and which a private subnet can pull at all.

ECR lifecycle policies
Tag immutability
Image scanning
Replication
Pull-through cache
ECR VPC endpoints

Domain: Core architecture
World: Architecture World 4: Shipped in Containers (Professional)
Game type: Solution board: Drop services into each row's slots, then run records through them.
Time: About 30 minutes on a first attempt (estimated)
Exam guides: SAA-C03Task 2.1: Design scalable and loosely coupled architectures
SAP-C02Task 4.3: Determine a new architecture for existing workloads
SCS-C03Skill 3.2.3: Scan compute resources for known vulnerabilities (for example, scan container images and Lambda functions by using Amazon Inspector, monitor compute runtimes by using GuardDuty)