Medium
EC2
Regional
VPCs should be configured with an interface endpoint for Docker Registry
NIST 800-53
Description
Confirms that VPC interface endpoints are available for the Amazon ECR Docker registry.
Remediation
Create a VPC interface endpoint for ECR Docker registry to enable private connectivity to Amazon ECR.
Steps
- Open the Amazon VPC console.
- In the navigation pane, choose 'Endpoints'.
- Choose 'Create endpoint'.
- Select 'AWS services' as the service category.
- Choose 'com.amazonaws.region.ecr.dkr' as the service.
- Select your VPC and subnets.
- Choose a security group and policy.
- Choose 'Create endpoint'.
Compliance
NIST 800-53