Query: Amazon Inspector ECR scanning should be enabled

Description

This control checks whether Amazon Inspector ECR scanning is enabled. For a standalone account, the control fails if Amazon Inspector ECR scanning is disabled in the account. In a multi-account environment, the control fails if the delegated Amazon Inspector administrator account and all member accounts don't have ECR scanning enabled.

Query

Tables used in this query:

• aws_inspector2_organization_configuration
• aws_region

Controls using this query:

• 2 Amazon Inspector ECR scanning should be enabled
• Amazon Inspector ECR scanning should be enabled

SQL