Skip to content

Commit 822f1c2

Browse files
committed
feat(security): enable enhanced ECR registry scanning
Enable enable_enhanced_ecr_registry_scanning for the ECS module's ecr-viewer to improve security posture by detecting vulnerabilities and malware more effectively. Refs: dibbs-aws-0avv
1 parent abadd44 commit 822f1c2

File tree

1 file changed

+4
-0
lines changed
  • terraform/implementation/ecs

1 file changed

+4
-0
lines changed

terraform/implementation/ecs/main.tf

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,8 @@ module "ecs" {
5151
# If intent is to pull from the dibbs-ecr-viewer GHCR, set disable_ecr to true (default is false when not set)
5252
disable_ecr = false
5353

54+
enable_enhanced_ecr_registry_scanning = true
55+
5456
# If the intent is to make the ecr-viewer available on the public internet, set internal to false (default is true when not set)
5557
# This requires an internet gateway to be present in the VPC.
5658
internal = var.internal
@@ -64,7 +66,9 @@ module "ecs" {
6466
enable_alb_deletion_protection = false
6567

6668
cw_retention_in_days = 14
69+
6770
ecr_viewer_object_retention_days = 14
71+
6872
logging_object_retention_days = 14
6973

7074
# If the intent is to enable alb deletion protection, set false (default is true when not set)

0 commit comments

Comments
 (0)