- ECR Repository Tag Should Be Immutable
ECR Repository Tag Should Be Immutable
More Info:
Ensures ECR repository image tags cannot be overwritten. ECR repositories should be configured to prevent overwriting of image tags to avoid potentially-malicious images from being deployed to live environments.
Risk Level
High
Address
Security, Operational Maturity
Compliance Standards
CBP