尝试从 ECR 拉取 emr-6.3.0-latest 基础镜像时拉取访问被拒绝

Getting pull access denied when trying to pull emr-6.3.0-latest base image from ECR

我正在关注 How to customize Docker images 并尝试拉取 emr-6.3.0-latest 的基础映像并尝试在推送到 ECR 之前对其进行修改。但是当我执行下面的命令时

docker pull 755674844232.dkr.ecr.us-east-1.amazonaws.com/spark/emr-6.3.0-latest

我收到类似

的错误
Error response from daemon: pull access denied for 755674844232.dkr.ecr.us-east-1.amazonaws.com/spark/emr-6.3.0-latest, repository does not exist or may require 'docker login': denied: User: arn:aws:iam::********:user/username is not authorized to perform: ecr:BatchGetImage on resource: arn:aws:ecr:us-east-1:755674844232:repository/spark/emr-6.3.0-latest

我还为我的用户附加了 ecr:BatchGetImage 政策。不确定我错过了什么?

看起来您链接的文档页面上的基本图像 URI 不正确,正如您怀疑的那样。正如你所描述的,我 运行 遇到了同样的问题,直到我发现这个 YouTube video,它有一个工作命令:

$ aws ecr get-login-password --region us-east-2 | docker login --username AWS --password-stdin 711395599931.dkr.ecr.us-east-2.amazonaws.com
Login Succeeded
$ docker pull 711395599931.dkr.ecr.us-east-2.amazonaws.com/notebook-spark/emr-6.3.0:latest
latest: Pulling from notebook-spark/emr-6.3.0
321892dd332d: Pull complete 
af6acd606054: Pull complete 
aed277952843: Pull complete 
ba95d0bc7985: Pull complete 
7ef8149b3bb3: Pull complete 
43d41e957447: Pull complete 
b149cafdd5e8: Pull complete 
Digest: sha256:4fafa37e98762663b55a53fa7c10ede6c58080ecda5e6749dcb2bcb4b15caa9b
Status: Downloaded newer image for 711395599931.dkr.ecr.us-east-2.amazonaws.com/notebook-spark/emr-6.3.0:latest
711395599931.dkr.ecr.us-east-2.amazonaws.com/notebook-spark/emr-6.3.0:latest

也许他们在更改 URI 时忘记更新文档。 IT历史上应该不是第一次了...