Amazon ECR connection setup
Returns the external id, the Strix AWS account, and the role name that an Amazon ECR pull role must trust, plus a CloudFormation quick-create link. Call this endpoint before you create an ecr registry. Container scanning requires the Enterprise plan.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Response
Setup values for the pull role.
Value the role trust policy must require as sts:ExternalId. Stable per organization.
AWS account Strix assumes the role from. The only principal the role should trust.
Name of the role the CloudFormation template creates.
CloudFormation quick-create link with the template and parameters filled in. Null when no template is hosted.
IAM actions the role needs, for roles created by hand.