🚀 Epic Adventure: Deploy Your App Across AWS Accounts with Docker & ECR! ✌️

Replace placeholders with real details – keep the secret code hidden from your buddy! Save it.

• Test Locally: Right-click index.html in your folder, open with browser (e.g., Chrome). It should display your page flawlessly.

High-five your buddy: Explain your Dockerfile to each other for extra learning vibes! 🤝

🏗️ Step 3: Build Your Docker Container Image Locally – Package the Magic! ✨

With files ready, let’s “build” your image – turning instructions into a runnable template!

• Run the Build Command: In terminal (inside DockerECR folder):

  docker build -t nextwork/cross-account-docker-app .  

Watch Docker pull Nginx and assemble your image. Grant any access popups.

• Verify the Build: Open Docker Desktop > Builds tab. Your image should top the list!
• Why This Matters: Now your app is containerized – consistent anywhere it’s run.

You’re halfway to sharing – exciting, right? 😎

🔑 Step 4: Log In to AWS with IAM – Secure Your Cloud Access! 🛡️

Shift to AWS: Use IAM for safe, limited access (not root user).

• Create IAM Admin User (If Needed): Log in as root to AWS IAM Console.
  • Users > Create user. Name: [YourName]-IAM-Admin.
  • Check “Provide user access to AWS Management Console.”
  • Custom password (secure, memorable). Uncheck “Users must create new password.”
  • Next > Attach policies directly > Search and select “AdministratorAccess.”
  • Create user.

• Log In as IAM User: Use the new credentials in AWS Management Console.

Buddy check: Ensure they’re using IAM too!

🗄️ Step 5: Create Your ECR Repository – Your Image Vault in the Cloud! ☁️

Amazon ECR stores your images securely. Let’s set one up!

• Navigate to ECR: In AWS Console, search for “ECR” > Repositories > Create repository.
• Configure: Private > Name: nextwork/cross-account-docker-app > Create.
• Why ECR?: It’s managed, private, and perfect for sharing containers across accounts.

Copy your repo URI – you’ll need it soon!

⚙️ Step 6: Set Up AWS CLI for ECR Access – Command-Line Superpowers! 💪

Enable terminal control over AWS.

• Install AWS CLI (If Needed): Download from AWS CLI docs. Install per OS. Verify: aws --version.
• Create IAM User for CLI: In IAM Console > Users > Create user: ECR-Access.
  • Console access: No.
  • Attach “AmazonEC2ContainerRegistryFullAccess.”
  • Create > Download .csv with access keys.

• Configure CLI: Run aws configure. Enter: Access Key ID, Secret Access Key, default region (e.g., us-east-1), output: json.

Now your CLI is ECR-ready!

📤 Step 7: Push Your Image to ECR – Launch to the Cloud! 🚀

Authenticate, tag, and upload!

• Authenticate Docker to ECR: In ECR repo > View push commands. Copy/run the first:

  aws ecr get-login-password --region [your-region] | docker login --username AWS --password-stdin [account-id].dkr.ecr.[region].amazonaws.com  

Login succeeded? Great!

• Tag Your Image: Run the third push command (tags as “latest”).
• Push It: Run the fourth:

  docker push [your-repo-uri]:latest  

Refresh ECR – your image is there!

Swap repo URIs with your buddy now.

🔒 Step 8: Grant Cross-Account Permissions – Unlock the Swap! 🔓

Make your private repo accessible to your buddy.

• Update Repo Policy: In ECR > Your repo > Permissions > Edit policy JSON. Add:

  {  
    "Version": "2012-10-17",  
    "Statement": [  
      {  
        "Effect": "Allow",  
        "Principal": {  
          "AWS": "[Buddy's ECR-Access ARN]"  
        },  
        "Action": [  
          "ecr:BatchCheckLayerAvailability",  
          "ecr:BatchGetImage",  
          "ecr:GetDownloadUrlForLayer"  
        ]  
      }  
    ]  
  }  

Replace with their ARN (from IAM > Users > ECR-Access > Summary). Save.

• Buddy Does the Same: Share your ARN; they add it to their policy.

Permissions granted – time for the pull!

🏃‍♂️ Step 9: Pull & Run Your Buddy’s Image – The Grand Reveal! 🎊

The climax: Deploy their app locally!

• Authenticate to Their ECR: Run their first push command in your terminal.
• Pull Their Image:

  docker pull [buddy's-repo-uri]:latest  

  docker run -d -p 80:80 [buddy's-repo-uri]:latest  

(If port 80 busy, try 8080:80.)

• View It Live: Browser > localhost (or localhost:8080). See their custom page and secret code! 📸 Screenshot for memories.

Swap screenshots – you’ve both deployed across accounts! 🏆

🧹 Step 10: Clean Up Resources – Stay Charge-Free! 🆓

Avoid bills: Delete everything.

• ECR Repo: ECR > Select repo > Delete.
• IAM User: IAM > Users > ECR-Access > Delete (confirm name). Delete .csv file locally.
• Docker Resources: Docker Desktop > Containers/Images/Builds tabs > Select all > Delete forever.

Spotless!

📣 Step 11: Share Your Victory – Inspire the World! 🌍

• Document & Post: Download your project notes as PDF. Share on LinkedIn: Pre-populate post, add PDF via “Add a document.” Title it proudly!
• Celebrate: Pat yourself (and buddy) on the back – you’ve mastered cross-account deployments! What’s next? More AWS & Docker adventures! 🔥