High Inspector Regional

Amazon Inspector ECR scanning should be enabled

PCI DSS v4.0.1PCI DSS v11.3.1

Description

Verifies that Amazon Inspector ECR scanning is enabled in the account to detect software vulnerabilities in container images stored in ECR.


Remediation

To remediate Amazon Inspector ECR scanning, you need to enable ECR scanning in Amazon Inspector.

Steps

  1. Navigate to the Amazon Inspector console
  2. Go to 'Settings' in the left navigation
  3. Select 'ECR' under 'Scanning'
  4. Enable 'ECR scanning'
  5. Configure scanning settings as needed
  6. Save the configuration
  7. Verify ECR scanning is active

Compliance

PCI DSS v4.0.1PCI DSS v11.3.1