Can not able to deploy Private ECR to Personal Linux machine using greengrass. while deploying component is not able to download Artifact.(Reason: Failed to get auth token for docker login)

Question

I created a component using "Recipe as YAML"

```
---
RecipeFormatVersion: '2020-01-25'
ComponentName: com.example.MyPrivateDockerComponent
ComponentVersion: '1.0.0'
ComponentDescription: 'A component that runs a Docker container from a private Amazon ECR image.'
ComponentPublisher: Amazon
ComponentDependencies:
  aws.greengrass.DockerApplicationManager:
    VersionRequirement: ~2.0.0
  aws.greengrass.TokenExchangeService:
    VersionRequirement: ~2.0.0
Manifests:
  - Platform:
      os: all
    Lifecycle:
        Run: docker run .dkr.ecr.us-east-1.amazonaws.com/demo:latest
    Artifacts:
      - URI: "docker:.dkr.ecr.us-east-1.amazonaws.com/demo:latest"
```
i have tried to  install docker-ce docker-ce-cli by using
```
Install:
      RequiresPrivilege: true
      Script: apt-get install docker-ce docker-ce-cli containerd.io
```
after component created i tried to deploy it in core but it is showing:-
```
FAILED_NO_STATE_CHANGE: Failed to download artifact name: 'docker:.dkr.ecr.us-east-1.amazonaws.com/demo:latest' for component com.example.Test7-1.0.0, reason: Failed to get auth token for docker login
```

Answer

Hi. Have you followed the [pre-requisites](https://docs.aws.amazon.com/greengrass/v2/developerguide/run-docker-container.html#run-docker-container-requirements) for running a Docker container in a component? Included in that, for using a Docker image stored in a private ECR repository, you need to add the following to your Greengrass device role:

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "ecr:GetAuthorizationToken",
        "ecr:BatchGetImage",
        "ecr:GetDownloadUrlForLayer"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    }
  ]
}
```

Can not able to deploy Private ECR to Personal Linux machine using greengrass. while deploying component is not able to download Artifact.(Reason: Failed to get auth token for docker login)

Relevant questions

Deploying greengrass v2 public components using CDK (e.g. ShadowManager)?

Possible to experiment with AWS Deep Learning Containers on nonAWS machine?

Not able to connect to RabbitMQ using Php

Not able to login to EC2 instance through putty.

How to install Greengrass 2.0 on Window OS

Component with bash script and python code - how to package/deploy

best practises for auto restarting docker application

Not able to login to EC2 running Oracle Linux(Custom AMI)

Error when deploying to GG core in docker

Can not able to deploy Private ECR to Personal Linux machine using greengrass. while deploying component is not able to download Artifact.(Reason: Failed to get auth token for docker login)