AWS AmazonECS documentation change
Summary
Updated error message examples and added new troubleshooting section for 'CannotPullContainerError' related to image resolution failures
Security assessment
The changes focus on improving error message documentation and troubleshooting steps for image pull failures. While important for reliability, there is no evidence these changes address security vulnerabilities or document security features.
Diff
diff --git a/AmazonECS/latest/developerguide/task_cannot_pull_image.md b/AmazonECS/latest/developerguide/task_cannot_pull_image.md index 6d5baddd5..2c42c976a 100644 --- a//AmazonECS/latest/developerguide/task_cannot_pull_image.md +++ b//AmazonECS/latest/developerguide/task_cannot_pull_image.md @@ -5 +5 @@ -The task can’t pull the image. Check that the role has the permissions to pull images from the registry.The task cannot pull ‘image-name’ from the Amazon ECR repository ‘repository URI’. There is a connection issue between the task and Amazon ECR. Check your task network configuration.The task can’t pull the image. Check your network configurationAPI error (500): Get https://111122223333.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request canceled while waiting for connectionAPI errorwrite /var/lib/docker/tmp/GetImageBlob111111111: no space left on deviceERROR: toomanyrequests: Too Many Requests or You have reached your pull rate limit.Error response from daemon: Get url: net/http: request canceled while waiting for connectionref pull has been retried 1 time(s): failed to copy: httpReaderSeeker: failed open: unexpected status codepull access deniedpull command failed: panic: runtime error: invalid memory address or nil pointer dereferenceerror pulling image conf/error pulling image configurationContext canceled +The task can’t pull the image. Check that the role has the permissions to pull images from the registry.The task cannot pull ‘image-name’ from the Amazon ECR repository ‘repository URI’. There is a connection issue between the task and Amazon ECR. Check your task network configuration.The task can’t pull the image. Check your network configurationCannotPullContainerError: pull image manifest has been retried 5 time(s): failed to resolve ref API error (500): Get https://111122223333.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request canceled while waiting for connectionAPI errorwrite /var/lib/docker/tmp/GetImageBlob111111111: no space left on deviceERROR: toomanyrequests: Too Many Requests or You have reached your pull rate limit.Error response from daemon: Get url: net/http: request canceled while waiting for connectionref pull has been retried 1 time(s): failed to copy: httpReaderSeeker: failed open: unexpected status codepull access deniedpull command failed: panic: runtime error: invalid memory address or nil pointer dereferenceerror pulling image conf/error pulling image configurationContext canceled @@ -24,0 +25,2 @@ To check your stopped tasks for an error message using the AWS Management Consol + * CannotPullContainerError: pull image manifest has been retried 5 time(s): failed to resolve ref + @@ -78,0 +81,15 @@ This error indicates that the task can't connect to Amazon ECR. +For information about how to verify and resolve the issue, see [Verifying Amazon ECS stopped task connectivity](./verify-connectivity.html). + +## CannotPullContainerError: pull image manifest has been retried 5 time(s): failed to resolve ref + +This error indicates that the task can't pull the image. + +To resolve this, you can: + + * Verify that the image specified in the task definition matches the image in the repository. + + * Amazon ECS forces image version stability. If the original image is no longer available you get this error. The image tag is part of enforcing this behavior. Change the image in the task definition from using :latest as the tag to a specifc version. For more information, see [Container image resolution](./deployment-type-ecs.html#deployment-container-image-stability). + + + +