Loading controls...
Control: ECR repository tags should be immutable
Description
AWS ECR should have all tags be immutable - once a container is published, another image cannot assume the same tag.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.ecr_repository_tags_immutableSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.ecr_repository_tags_immutable --shareSQL
This control uses a named query:
ecr_repository_tags_immutable