Medium
EC2
Regional
VPCs should be configured with an interface endpoint for ECR API
NIST 800-53
Description
Verifies that VPC interface endpoints are available for the Amazon ECR API.
Remediation
Create a VPC interface endpoint for ECR API to enable private connectivity to Amazon ECR.
Steps
- Open the Amazon VPC console.
- In the navigation pane, choose 'Endpoints'.
- Choose 'Create endpoint'.
- Select 'AWS services' as the service category.
- Choose 'com.amazonaws.region.ecr.api' as the service.
- Select your VPC and subnets.
- Choose a security group and policy.
- Choose 'Create endpoint'.
Compliance
NIST 800-53