AWS Certified DevOps Engineer – Professional — Question 162

A company is migrating Docker repositories to Amazon Elastic Container Registry (Amazon ECR) in an existing AWS account. A DevOps engineer needs to automate the management of images that are uploaded to the repositories. The solution must limit the number of image versions. As a first step, the DevOps engineer creates a private repository in Amazon ECR for each repository that the company will migrate.

What should the DevOps engineer do next to meet the requirements in the MOST operationally efficient manner?

Answer options

• A. Create an AWS Lambda function to scan the images in each repository for the number of versions present. Configure the Lambda function to delete older versions of images if the number of images is greater than the desired number of images. Schedule the Lambda function to run automatically at regular intervals,
• B. Create a repository policy that assesses the number of images and deletes older versions if the number of images is greater than the desired number of images. Apply the repository policy to each private repository.
• C. Create an AWS Step Functions state machine Express Workflow to scan the images in each repository for the number of versions present. Configure the Express Workflow to delete older versions of images if the number of images is greater than the desired number of images. Configure the state machine to run every time an image is pushed to a repository.
• D. Push an image into each private repository. In each private repository, create a lifecycle policy preview to delete older versions of images if the number of images is greater than the desired number of images. Test the lifecycle policy and validate the impact. Apply the lifecycle policy to manage the images.

Correct answer: D

Explanation

The correct answer is D because creating a lifecycle policy directly within Amazon ECR is the most efficient way to manage image versions automatically without additional overhead. Options A and C involve extra steps and complexity by using Lambda and Step Functions, which are not necessary for this specific task. Option B suggests a repository policy that is not a feature available in Amazon ECR for managing image versions.