on_finish:

...

retry:

...

...

{% endhighlight %}

|`candidate`| The identifier of the image to push to the remote Docker registry. It can be an explicit identifier of an image to push, or a variable that references a`Build` step.| Required|

|`tag`| The tag under which to push the image. Use either this or`tags`.<br> The default is`latest`.| Default|

|`region`| Relevant only for[Amazon ECR]({{site.baseurl}}/docs/integrations/docker-registries/amazon-ec2-container-registry/) integrations using either service accounts or explicit credentials. The names of the regions for which to perform cross-region replication. The names of the source region and the destination region name must be defined in separate steps.| Optional|

|`role_arn`| Relevant only for[Amazon ECR]({{site.baseurl}}/docs/integrations/docker-registries/amazon-ec2-container-registry/) integrations using either service accounts or explicit credentials. The role with the required permissions to use to pull the image. For example,`arn:aws:iam::<account-id>:role/<role-name>`| Required|

|`aws_session_name`| Relevant only for[Amazon ECR]({{site.baseurl}}/docs/integrations/docker-registries/amazon-ec2-container-registry/) integrations using either service accounts or explicit credentials. The name of the AWS session. If not defined,`default-session-name` is used.| Default|

|`aws_duration_seconds`| Relevant only for[Amazon ECR]({{site.baseurl}}/docs/integrations/docker-registries/amazon-ec2-container-registry/) integrations using either service accounts or explicit credentials. The length of time, in seconds, for which the role credentials are considered valid, and must be between`900-3600` seconds. If not defined, the duration is set to the default of`3600` seconds.| Default|

| `tags` | Multiple tags under which to push the image. Use either this or `tag`. This is an array, so should be of the following style: <br> {::nomarkdown}<figure class="highlight"><pre><code class="language-yaml" data-lang="yaml"><span class="na">tags</span><span class="pi">:</span><br><span class="pi">-</span> <span class="s">tag1</span><br><span class="pi">-</span> <span class="s">tag2</span><br><span class="pi">-</span> <span class="s">{% raw %}${{CF_BRANCH_TAG_NORMALIZED_LOWER_CASE}}{% endraw %}</span><br><span class="pi">-</span> <span class="s">tag4</span></code></pre></figure>{:/}or<br>{::nomarkdown}<figure class="highlight"><pre><code class="language-yaml" data-lang="yaml"><span class="na">tags</span><span class="pi">:</span> <span class="pi">[</span> <span class="s1">'</span><span class="s">tag1'</span><span class="pi">,</span> <span class="s1">'</span><span class="s">tag2'</span><span class="pi">,</span> <span class="s1">'</span><span class="s">{% raw %}${{CF_BRANCH_TAG_NORMALIZED_LOWER_CASE}}{% endraw %}'</span><span class="pi">,</span> <span class="s1">'</span><span class="s">tag4'</span> <span class="pi">]</span></code></pre></figure>{:/} | Default |

|`image_name`| The tagged image name that will be used The default value will be the same image name as of the candidate.| Default|

|`registry`| The registry logical name of one of the inserted registries from the integration view. <br>The default value will be your default registry[if you have more than one]({{site.baseurl}}/docs/docker-registries/external-docker-registries/).| Default|