creating-ec2-image-builder-pipeline

Create the resources in order: IAM role and instance profile, build component, image recipe, infrastructure configuration, distribution configuration, then the image pipeline. Use the exact ARNs returned by each create API call when assembling the pipeline.

Create a distribution configuration with distribution entries for both the source region and the target region, each with an amiDistributionConfiguration. If the target region matches the source region, include only a single entry to avoid duplicate region errors.

This error is caused by malformed ARNs passed to the API. Use the exact ARN returned by each create call rather than constructing ARNs manually, and do not add version or build number segments to pipeline ARNs.

IAM changes are eventually consistent, so the instance profile may not be visible immediately after creation. Wait 10-15 seconds after creating the instance profile before referencing it in the infrastructure configuration.

Image builds typically take 15-45 minutes and continue running in the background after execution starts. Check progress with aws imagebuilder get-image using the image build version ARN returned when the pipeline execution started.

Yes, set the enable_ecr_builds parameter to true. This attaches the EC2InstanceProfileForImageBuilderECRContainerBuilds managed policy to the IAM role, granting the build instance the required ECR access.