turbot/aws_compliance
Loading controls...

Control: ECR private repositories should have tag immutability configured

Description

This control checks whether a private ECR repository has tag immutability enabled. This control fails if a private ECR repository has tag immutability disabled. This rule passes if tag immutability is enabled and has the value IMMUTABLE.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.ecr_repository_tag_immutability_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.ecr_repository_tag_immutability_enabled --share

SQL

This control uses a named query:

ecr_repository_tag_immutability_enabled

Tags