diff --git a/.github/workflows/push_to_ecr.yml b/.github/workflows/push_to_ecr.yml
new file mode 100644
index 0000000..b856c12
--- /dev/null
+++ b/.github/workflows/push_to_ecr.yml
@@ -0,0 +1,37 @@
+name: Build and Push to Amazon ECR
+
+on:
+  push:
+    branches: [ main ]   # run workflow on pushes to main
+
+env:
+  ECR_REPOSITORY: clo835-week3
+  AWS_REGION: us-east-1   # change if you’re in another region
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Build, tag, and push image
+        env:
+          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+          IMAGE_TAG: latest
+        run: |
+          docker build -t $ECR_REGISTRY/${{ env.ECR_REPOSITORY }}:$IMAGE_TAG .
+          docker push $ECR_REGISTRY/${{ env.ECR_REPOSITORY }}:$IMAGE_TAG
+