Error pulling image from ECR through Internet proxy

Question

Hi, we are getting an error pulling images from ECR private repositories from a server that get access to Internet through a web proxy. We ask proxy admin to allow access to .dkr.ecr.us-east-2.amazonaws.com. We are using aws cli to authenticate with amazon and docker, docker login is successful with aws token, however when we pull the image we get an error like this, after some timeouts reported by docker trying to get image layers:

`error pulling image configuration: download failed after attempts=6: dial tcp 52.219.102.138:443: i/o timeout`

Docker pull command is something like:
```
docker pull .dkr.ecr.us-east-2.amazonaws.com/:
```
Appreciate your help, what are we missing ? Is there some additional domain/endpoint we have to enable access on web proxy configuration ? Do we need add  https://api.ecr.us-east-2.amazonaws.com/ to web proxy allowed targets ? Something else ?

Appreciate your help.

Answer

Need to communicate with the following endpoints.

```
dkr.ecr.us-east-2.amazonaws.com
api.ecr.us-east-2.amazonaws.com
s3.us-east-2.amazonaws.com
```

Also consider using VPC Endpoints.  
https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-endpoints.html

Error pulling image from ECR through Internet proxy

Relevant content