Aqua CSPM

ECR Repository Tag Immutability

Quick Info

Plugin TitleECR Repository Tag Immutability
CloudAWS
CategoryECR
DescriptionEnsures ECR repository image tags cannot be overwritten
More InfoECR repositories should be configured to prevent overwriting of image tags to avoid potentially-malicious images from being deployed to live environments.
AWS Linkhttps://docs.aws.amazon.com/AmazonECR/latest/userguide/image-tag-mutability.html
Recommended ActionUpdate ECR registry configurations to ensure image tag mutability is set to immutable.

Detailed Remediation Steps