turbot/aws_compliance
Loading controls...

Control: ECR repositories should have image scan on push enabled

Description

Ensure AWS Elastic Container Registry (ECR) repositories have image scanning enabled. The rule is non-compliant if image scanning is not enabled for the ECR repository.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.ecr_repository_image_scan_on_push_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.ecr_repository_image_scan_on_push_enabled --share

SQL

This control uses a named query:

ecr_repository_image_scan_on_push_enabled

Tags