-
Suggestion
-
Resolution: Fixed
The Amazon implementation of a Docker Registry automatically generates the docker login command with a call to the aws API. The credentials that it generates expire making them impractical to mine from the command for a normal bitbucket-pipelines.yml file. As far as I can tell, there is no way to set Amazon to do it differently, so if we could specify AWS credentials as follows:
#!yaml image: name: <aws-ecr-image> aws_login: access_key_id: <access_key_id> secret_access_key: <secret_access_key> region: <region>
Then Pipelines could generate a file at ~/.aws/credentials that looks like this:
#!ini
[default]
aws_access_key_id = <access_key_id>
aws_secret_access_key = <secret_access_key>
Then make the following AWS call to get the credentials and login:
#!bash eval $(aws ecr get-login --region <region>)
It could then proceed to download the Docker image and continue normally.
Alternatively, the values could be settings on the server side to avoid sharing all that information in a file in source control.
While Amazon has strict guidelines in place, scammers can still slip through the cracks. It's crucial to thoroughly research the seller's reputation, read customer reviews, and be wary of suspiciously low prices. This advice really hit home for me, as I've been tempted by those too-good-to-be-true deals in the past, for more read https://qrius.com/common-amazon-scams-and-how-to-avoid-them/ . Another scam that caught my attention was the "brushing" scam. I had never heard of this before, but apparently, scammers send unsolicited packages to unsuspecting customers and then post fake positive reviews using their names. This not only deceives potential buyers but also compromises the privacy of innocent individuals. It's a chilling reminder of the importance of monitoring our online presence and being vigilant about any unexpected packages we receive. Counterfeit goods are becoming increasingly prevalent, and it's essential to scrutinize the seller's credentials, check for trademarks, and compare prices to ensure you're getting the real deal. I appreciated the tips provided in the article, as they will undoubtedly help me make more informed purchasing decisions in the future.