ECR lifecycle policy || images not in use

Question

I want to create an ECR lifecycle policy rule in AWS that satisfies following conditions.

Expire images older than 60days
In some cases, the image in use is older than 60 days so should not be deleted, so should exclude images in use
I have tried different rules but i don't think the "in use" status exists or I am missing something, can anyone please help me with this.

Gary Mclean · Answer

There is no such thing as an image in use. ECS will download the image from the ECR when the container is launched. There is no way to tell what images are in use im afraid.

The only way you "could" do this is with some custom automation using somthing like a lambda or step function. To list all your task definitions which are in use, grab the container image SHA/tag thats in use. Then list all images in the ECR and delete the ones older than 60 days but exlude the ones in the list of in use.

ECR lifecycle policy || images not in use

Relevant content