Medium
ECR
Regional
ECR private repositories should have tag immutability configured
NIST
Description
Confirms that private ECR repositories have tag immutability enabled, preventing image tags from being overwritten.
Remediation
To configure tag immutability for an ECR repository, refer to the Amazon Elastic Container Registry User Guide.
Steps
- Open the Amazon ECR console.
- Choose the repository.
- Under the Image Tag Mutability section, select 'Immutable'.
- Save the changes.
Compliance
NIST