Loading controls...
Control: ECR repository tags should be immutable
Description
AWS ECR should have all tags be immutable - once a container is published, another image cannot assume the same tag.
Usage
Run the control in your terminal:
steampipe check terraform_aws_compliance.control.ecr_repository_tags_immutableSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.control.ecr_repository_tags_immutableSQL
This control uses a named query:
ecr_repository_tags_immutable