On your local workstation, configure a profile for the AWS CLI to use when connecting to AWS. You can accomplish this by calling the aws configure command, which will prompt you for the necessary values, including your user's Access Key ID and Secret Access Key. For more information see the following link: https://docs.aws.amazon.com/comprehend/latest/dg/setup-awscli.html 

Before you pull a container image from AWS Marketplace, you must first sign into the registry of AWS Marketplace. $ aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com

If the login is successful, pull the container image with the following command: $ docker pull 709825985650.dkr.ecr.us-east-1.amazonaws.com/keyfactor/signserver-ce:6.3.0 For easy startup: $ docker run 709825985650.dkr.ecr.us-east-1.amazonaws.com/keyfactor/signserver-ce:6.3.0

For more parameters such as exposing ports to the localhost and setting up TLS for SignServer, use something like the following $ docker run -it --rm -p 80:8080 -p 443:8443 -h localhost -e TLS_SETUP_ENABLED="true" 709825985650.dkr.ecr.us-east-1.amazonaws.com/keyfactor/signserver-ce:6.3.0

For more parameters, please see the following documentation: https://doc.primekey.com/signserver/tutorials-and-guides/quick-start-guide-start-signserver-container-with-client-certificate-authenticated-access 

Please see the following link for more lenghty tutorials: https://doc.primekey.com/signserver/tutorials-and-guides