@@ -801,6 +801,7 @@ export class UploadNotFoundException extends __BaseException {
801
801
export const UpstreamRegistry = {
802
802
AzureContainerRegistry : "azure-container-registry" ,
803
803
DockerHub : "docker-hub" ,
804
+ Ecr : "ecr" ,
804
805
EcrPublic : "ecr-public" ,
805
806
GitHubContainerRegistry : "github-container-registry" ,
806
807
GitLabContainerRegistry : "gitlab-container-registry" ,
@@ -819,6 +820,11 @@ export type UpstreamRegistry = (typeof UpstreamRegistry)[keyof typeof UpstreamRe
819
820
export interface CreatePullThroughCacheRuleRequest {
820
821
/**
821
822
* <p>The repository name prefix to use when caching images from the source registry.</p>
823
+ * <important>
824
+ * <p>There is always an assumed <code>/</code> applied to the end of the prefix. If you
825
+ * specify <code>ecr-public</code> as the prefix, Amazon ECR treats that as
826
+ * <code>ecr-public/</code>.</p>
827
+ * </important>
822
828
* @public
823
829
*/
824
830
ecrRepositoryPrefix : string | undefined ;
@@ -829,32 +835,42 @@ export interface CreatePullThroughCacheRuleRequest {
829
835
* registry.</p>
830
836
* <ul>
831
837
* <li>
832
- * <p>Amazon ECR Public (<code>ecr-public</code>) - <code>public.ecr.aws</code>
838
+ * <p>Amazon ECR (<code>ecr</code>) –
839
+ * <code>dkr.ecr.<region>.amazonaws.com</code>
840
+ * </p>
841
+ * </li>
842
+ * <li>
843
+ * <p>Amazon ECR Public (<code>ecr-public</code>) – <code>public.ecr.aws</code>
833
844
* </p>
834
845
* </li>
835
846
* <li>
836
- * <p>Docker Hub (<code>docker-hub</code>) -
847
+ * <p>Docker Hub (<code>docker-hub</code>) –
837
848
* <code>registry-1.docker.io</code>
838
849
* </p>
839
850
* </li>
840
851
* <li>
841
- * <p>Quay (<code>quay</code>) - <code>quay.io</code>
852
+ * <p>GitHub Container Registry (<code>github-container-registry</code>) –
853
+ * <code>ghcr.io</code>
842
854
* </p>
843
855
* </li>
844
856
* <li>
845
- * <p>Kubernetes (<code>k8s</code>) - <code>registry.k8s.io</code>
857
+ * <p>GitLab Container Registry (<code>gitlab-container-registry</code>) –
858
+ * <code>registry.gitlab.com</code>
846
859
* </p>
847
860
* </li>
848
861
* <li>
849
- * <p>GitHub Container Registry (<code>github-container-registry</code>) -
850
- * <code>ghcr.io</code>
862
+ * <p>Kubernetes (<code>k8s</code>) – <code>registry.k8s.io</code>
851
863
* </p>
852
864
* </li>
853
865
* <li>
854
- * <p>Microsoft Azure Container Registry (<code>azure-container-registry</code>) -
866
+ * <p>Microsoft Azure Container Registry (<code>azure-container-registry</code>) –
855
867
* <code><custom>.azurecr.io</code>
856
868
* </p>
857
869
* </li>
870
+ * <li>
871
+ * <p>Quay (<code>quay</code>) – <code>quay.io</code>
872
+ * </p>
873
+ * </li>
858
874
* </ul>
859
875
* @public
860
876
*/
@@ -879,6 +895,22 @@ export interface CreatePullThroughCacheRuleRequest {
879
895
* @public
880
896
*/
881
897
credentialArn ?: string | undefined ;
898
+
899
+ /**
900
+ * <p>Amazon Resource Name (ARN) of the IAM role to be assumed by Amazon ECR to authenticate to
901
+ * the ECR upstream registry. This role must be in the same account as the registry that
902
+ * you are configuring.</p>
903
+ * @public
904
+ */
905
+ customRoleArn ?: string | undefined ;
906
+
907
+ /**
908
+ * <p>The repository name prefix of the upstream registry to match with the upstream
909
+ * repository name. When this field isn't specified, Amazon ECR will use the
910
+ * <code>ROOT</code>.</p>
911
+ * @public
912
+ */
913
+ upstreamRepositoryPrefix ?: string | undefined ;
882
914
}
883
915
884
916
/**
@@ -922,6 +954,18 @@ export interface CreatePullThroughCacheRuleResponse {
922
954
* @public
923
955
*/
924
956
credentialArn ?: string | undefined ;
957
+
958
+ /**
959
+ * <p>The ARN of the IAM role associated with the pull through cache rule.</p>
960
+ * @public
961
+ */
962
+ customRoleArn ?: string | undefined ;
963
+
964
+ /**
965
+ * <p>The upstream repository prefix associated with the pull through cache rule.</p>
966
+ * @public
967
+ */
968
+ upstreamRepositoryPrefix ?: string | undefined ;
925
969
}
926
970
927
971
/**
@@ -1498,8 +1542,8 @@ export interface RepositoryCreationTemplate {
1498
1542
imageTagMutability ?: ImageTagMutability | undefined ;
1499
1543
1500
1544
/**
1501
- * <p>he repository policy to apply to repositories created using the template. A repository
1502
- * policy is a permissions policy associated with a repository to control access
1545
+ * <p>The repository policy to apply to repositories created using the template. A
1546
+ * repository policy is a permissions policy associated with a repository to control access
1503
1547
* permissions. </p>
1504
1548
* @public
1505
1549
*/
@@ -1701,6 +1745,18 @@ export interface DeletePullThroughCacheRuleResponse {
1701
1745
* @public
1702
1746
*/
1703
1747
credentialArn ?: string | undefined ;
1748
+
1749
+ /**
1750
+ * <p>The ARN of the IAM role associated with the pull through cache rule.</p>
1751
+ * @public
1752
+ */
1753
+ customRoleArn ?: string | undefined ;
1754
+
1755
+ /**
1756
+ * <p>The upstream repository prefix associated with the pull through cache rule.</p>
1757
+ * @public
1758
+ */
1759
+ upstreamRepositoryPrefix ?: string | undefined ;
1704
1760
}
1705
1761
1706
1762
/**
@@ -2249,10 +2305,10 @@ export interface ImageDetail {
2249
2305
* <p>If the image is a manifest list, this will be the max size of all manifests in the
2250
2306
* list.</p>
2251
2307
* <note>
2252
- * <p>Beginning with Docker version 1.9, the Docker client compresses image layers
2253
- * before pushing them to a V2 Docker registry. The output of the <code>docker
2254
- * images</code> command shows the uncompressed image size, so it may return a
2255
- * larger image size than the image sizes returned by <a>DescribeImages</a>.</p>
2308
+ * <p>Starting with Docker version 1.9, the Docker client compresses image layers before
2309
+ * pushing them to a V2 Docker registry. The output of the <code>docker images</code>
2310
+ * command shows the uncompressed image size. Therefore, Docker might return a larger
2311
+ * image than the image sizes returned by <a>DescribeImages</a>.</p>
2256
2312
* </note>
2257
2313
* @public
2258
2314
*/
@@ -3075,6 +3131,18 @@ export interface PullThroughCacheRule {
3075
3131
*/
3076
3132
credentialArn ?: string | undefined ;
3077
3133
3134
+ /**
3135
+ * <p>The ARN of the IAM role associated with the pull through cache rule.</p>
3136
+ * @public
3137
+ */
3138
+ customRoleArn ?: string | undefined ;
3139
+
3140
+ /**
3141
+ * <p>The upstream repository prefix associated with the pull through cache rule.</p>
3142
+ * @public
3143
+ */
3144
+ upstreamRepositoryPrefix ?: string | undefined ;
3145
+
3078
3146
/**
3079
3147
* <p>The name of the upstream source registry associated with the pull through cache
3080
3148
* rule.</p>
@@ -3389,10 +3457,10 @@ export interface GetAccountSettingResponse {
3389
3457
name ?: string | undefined ;
3390
3458
3391
3459
/**
3392
- * <p>The setting value for the setting name. The following are valid values for the basic scan
3393
- * type being used: <code>AWS_NATIVE</code> or <code>CLAIR</code>. The following are valid
3394
- * values for the registry policy scope being used: <code>V1</code> or
3395
- * <code>V2</code>.</p>
3460
+ * <p>The setting value for the setting name. The following are valid values for the basic
3461
+ * scan type being used: <code>AWS_NATIVE</code> or <code>CLAIR</code>. The following are
3462
+ * valid values for the registry policy scope being used: <code>V1</code> or
3463
+ * <code>V2</code>.</p>
3396
3464
* @public
3397
3465
*/
3398
3466
value ?: string | undefined ;
@@ -4816,7 +4884,15 @@ export interface UpdatePullThroughCacheRuleRequest {
4816
4884
* to the upstream registry.</p>
4817
4885
* @public
4818
4886
*/
4819
- credentialArn : string | undefined ;
4887
+ credentialArn ?: string | undefined ;
4888
+
4889
+ /**
4890
+ * <p>Amazon Resource Name (ARN) of the IAM role to be assumed by Amazon ECR to authenticate to the
4891
+ * ECR upstream registry. This role must be in the same account as the registry that you
4892
+ * are configuring.</p>
4893
+ * @public
4894
+ */
4895
+ customRoleArn ?: string | undefined ;
4820
4896
}
4821
4897
4822
4898
/**
@@ -4848,6 +4924,18 @@ export interface UpdatePullThroughCacheRuleResponse {
4848
4924
* @public
4849
4925
*/
4850
4926
credentialArn ?: string | undefined ;
4927
+
4928
+ /**
4929
+ * <p>The ARN of the IAM role associated with the pull through cache rule.</p>
4930
+ * @public
4931
+ */
4932
+ customRoleArn ?: string | undefined ;
4933
+
4934
+ /**
4935
+ * <p>The upstream repository prefix associated with the pull through cache rule.</p>
4936
+ * @public
4937
+ */
4938
+ upstreamRepositoryPrefix ?: string | undefined ;
4851
4939
}
4852
4940
4853
4941
/**
@@ -5116,6 +5204,18 @@ export interface ValidatePullThroughCacheRuleResponse {
5116
5204
*/
5117
5205
credentialArn ?: string | undefined ;
5118
5206
5207
+ /**
5208
+ * <p>The ARN of the IAM role associated with the pull through cache rule.</p>
5209
+ * @public
5210
+ */
5211
+ customRoleArn ?: string | undefined ;
5212
+
5213
+ /**
5214
+ * <p>The upstream repository prefix associated with the pull through cache rule.</p>
5215
+ * @public
5216
+ */
5217
+ upstreamRepositoryPrefix ?: string | undefined ;
5218
+
5119
5219
/**
5120
5220
* <p>Whether or not the pull through cache rule was validated. If <code>true</code>, Amazon ECR
5121
5221
* was able to reach the upstream registry and authentication was successful. If
0 commit comments