High
Inspector
Regional
Amazon Inspector ECR scanning should be enabled
PCI DSS v4.0.1PCI DSS v11.3.1
Description
Verifies that Amazon Inspector ECR scanning is enabled in the account to detect software vulnerabilities in container images stored in ECR.
Remediation
To remediate Amazon Inspector ECR scanning, you need to enable ECR scanning in Amazon Inspector.
Steps
- Navigate to the Amazon Inspector console
- Go to 'Settings' in the left navigation
- Select 'ECR' under 'Scanning'
- Enable 'ECR scanning'
- Configure scanning settings as needed
- Save the configuration
- Verify ECR scanning is active
Compliance
PCI DSS v4.0.1PCI DSS v11.3.1