AWS AWSCloudFormation high security documentation change
Summary
Expanded documentation for ScanningRule properties, detailing scan frequencies (CONTINUOUS_SCAN/SCAN_ON_PUSH) and repository filtering mechanisms.
Security assessment
Provides explicit guidance on configuring image scanning rules and filters, which are essential for detecting vulnerabilities in container images. This directly documents security controls.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.md b/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.md index 38bcf8f6c..919629168 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.md +++ b//AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.md @@ -7 +7 @@ SyntaxProperties -The `ScanningRule` property type specifies Property description not available. for an [AWS::ECR::RegistryScanningConfiguration](./aws-resource-ecr-registryscanningconfiguration.html). +The scanning rules associated with the registry. @@ -35 +35 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +The details of a scanning repository filter. For more information on how to use filters, see [Using filters](https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html#image-scanning-filters) in the _Amazon Elastic Container Registry User Guide_. @@ -50 +50 @@ _Required_ : Yes -Property description not available. +The frequency that scans are performed at for a private registry. When the `ENHANCED` scan type is specified, the supported scan frequencies are `CONTINUOUS_SCAN` and `SCAN_ON_PUSH`. When the `BASIC` scan type is specified, the `SCAN_ON_PUSH` scan frequency is supported. If scan on push is not specified, then the `MANUAL` scan frequency is set by default.