Query: ECR repositories should have image scan on push enabled

Description

Ensure AWS Elastic Container Registry (ECR) repositories have image scanning enabled. The rule is non-compliant if image scanning is not enabled for the ECR repository.

Query

Tables used in this query:

• aws_ecr_registry_scanning_configuration
• aws_ecr_repository

Controls using this query:

• 1 ECR private repositories should have image scanning configured
• ECR repositories should have image scan on push enabled

SQL