AWS v7.11.0 published on Wednesday, Nov 5, 2025 by Pulumi
aws.ecrpublic.getAuthorizationToken
Start a Neo task
Explain and create an aws.ecrpublic.getAuthorizationToken resource
The Public ECR Authorization Token data source allows the authorization token, token expiration date, user name, and password to be retrieved for a Public ECR repository.
NOTE: This data source can only be used in the
us-east-1region.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const token = aws.ecrpublic.getAuthorizationToken({});
import pulumi
import pulumi_aws as aws
token = aws.ecrpublic.get_authorization_token()
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ecrpublic"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := ecrpublic.GetAuthorizationToken(ctx, &ecrpublic.GetAuthorizationTokenArgs{}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var token = Aws.EcrPublic.GetAuthorizationToken.Invoke();
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ecrpublic.EcrpublicFunctions;
import com.pulumi.aws.ecrpublic.inputs.GetAuthorizationTokenArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var token = EcrpublicFunctions.getAuthorizationToken(GetAuthorizationTokenArgs.builder()
.build());
}
}
variables:
token:
fn::invoke:
function: aws:ecrpublic:getAuthorizationToken
arguments: {}
Using getAuthorizationToken
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAuthorizationToken(args: GetAuthorizationTokenArgs, opts?: InvokeOptions): Promise<GetAuthorizationTokenResult>
function getAuthorizationTokenOutput(args: GetAuthorizationTokenOutputArgs, opts?: InvokeOptions): Output<GetAuthorizationTokenResult>def get_authorization_token(region: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetAuthorizationTokenResult
def get_authorization_token_output(region: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetAuthorizationTokenResult]func GetAuthorizationToken(ctx *Context, args *GetAuthorizationTokenArgs, opts ...InvokeOption) (*GetAuthorizationTokenResult, error)
func GetAuthorizationTokenOutput(ctx *Context, args *GetAuthorizationTokenOutputArgs, opts ...InvokeOption) GetAuthorizationTokenResultOutput> Note: This function is named GetAuthorizationToken in the Go SDK.
public static class GetAuthorizationToken
{
public static Task<GetAuthorizationTokenResult> InvokeAsync(GetAuthorizationTokenArgs args, InvokeOptions? opts = null)
public static Output<GetAuthorizationTokenResult> Invoke(GetAuthorizationTokenInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetAuthorizationTokenResult> getAuthorizationToken(GetAuthorizationTokenArgs args, InvokeOptions options)
public static Output<GetAuthorizationTokenResult> getAuthorizationToken(GetAuthorizationTokenArgs args, InvokeOptions options)
fn::invoke:
function: aws:ecrpublic/getAuthorizationToken:getAuthorizationToken
arguments:
# arguments dictionaryThe following arguments are supported:
getAuthorizationToken Result
The following output properties are available:
- string
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - Expires
At string - Time in UTC RFC3339 format when the authorization token expires.
- Id string
- The provider-assigned unique ID for this managed resource.
- Password string
- Password decoded from the authorization token.
- Region string
- User
Name string - User name decoded from the authorization token.
- string
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - Expires
At string - Time in UTC RFC3339 format when the authorization token expires.
- Id string
- The provider-assigned unique ID for this managed resource.
- Password string
- Password decoded from the authorization token.
- Region string
- User
Name string - User name decoded from the authorization token.
- String
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - expires
At String - Time in UTC RFC3339 format when the authorization token expires.
- id String
- The provider-assigned unique ID for this managed resource.
- password String
- Password decoded from the authorization token.
- region String
- user
Name String - User name decoded from the authorization token.
- string
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - expires
At string - Time in UTC RFC3339 format when the authorization token expires.
- id string
- The provider-assigned unique ID for this managed resource.
- password string
- Password decoded from the authorization token.
- region string
- user
Name string - User name decoded from the authorization token.
- str
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - expires_
at str - Time in UTC RFC3339 format when the authorization token expires.
- id str
- The provider-assigned unique ID for this managed resource.
- password str
- Password decoded from the authorization token.
- region str
- user_
name str - User name decoded from the authorization token.
- String
- Temporary IAM authentication credentials to access the ECR repository encoded in base64 in the form of
user_name:password. - expires
At String - Time in UTC RFC3339 format when the authorization token expires.
- id String
- The provider-assigned unique ID for this managed resource.
- password String
- Password decoded from the authorization token.
- region String
- user
Name String - User name decoded from the authorization token.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
awsTerraform Provider.
