[ECR] [request]: track last pulled date of image

[JordanSussman]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request

Having the ability to see the last download date for any given image/tag without needing to query Cloud Trail logs.

Which service(s) is this request for?
ECR

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?

The process of cleaning up images within ECR can be daunting because you have little insight into determining if/when images were last downloaded without accessing Cloud Trail. We want to increase our confidence that deleting any given image/tag has less likelihood for harmful impact since it hasn't been downloaded in n days.

Are you currently working around this issue?

We have thought about creating a simple script to receive/parse cloudtrail logs that puts the upload/download into a database for us to easily query.

Additional context

Other tools like Artifactory have rich metadata around upload and download data that ECR lacks.

[rpnguyen]

Thanks for the suggestion! This is also a prerequisite for #921

[sbkg0002]

Any update on this?

[sbkg0002]

Since the metrics are there, can we have this policy filter please?

https://aws.amazon.com/about-aws/whats-new/2022/01/amazon-ecr-monitor-repository-pull-statistics/

[jlbutler]

Hi everyone. I'm going to mark this one Shipped as we are now curating a lastRecordedPullTime on the image details. Integrating this into LCP rules is being tracked in issue #921 . Thanks!