AWS AmazonECR documentation change
Summary
Updated link format and clarified IAM policy requirements for IPv6
Security assessment
Adds guidance about updating security policies for IPv6 compatibility, which is security-related best practice documentation but not a direct security fix.
Diff
diff --git a/AmazonECR/latest/userguide/ecr-requests.md b/AmazonECR/latest/userguide/ecr-requests.md index 5b1f4c422..8b5d58334 100644 --- a//AmazonECR/latest/userguide/ecr-requests.md +++ b//AmazonECR/latest/userguide/ecr-requests.md @@ -9 +9 @@ Getting started with IPv6Testing IP address compatibilityMaking requests using d -You can push, pull, delete, view, and manage OCI images, Docker images, and OCI-compatible artifacts in Amazon ECR private registries using either IPv4-only endpoints or dual-stack (IPv4 and IPv6) endpoints. For making requests from IPv4 networks, you can use either dual-stack or IPv4 endpoints. For making requests from an IPv6 network, use a dual-stack endpoint. For more information about making requests to Amazon ECR Public registries using IPv4 and dual-stack endpoints, see [Making requests to Amazon ECR Public registries](https://docs.aws.amazon.com/AmazonECR/latest/userguide/public-ecr-requests.html). There are no additional charges for accessing Amazon ECR over IPv6. For more information about pricing, see [Amazon Elastic Container Registry pricing](https://aws.amazon.com/ecr/pricing/). +You can push, pull, delete, view, and manage OCI images, Docker images, and OCI-compatible artifacts in Amazon ECR private registries using either IPv4-only endpoints or dual-stack (IPv4 and IPv6) endpoints. For making requests from IPv4 networks, you can use either dual-stack or IPv4 endpoints. For making requests from an IPv6 network, use a dual-stack endpoint. For more information about making requests to Amazon ECR Public registries using IPv4 and dual-stack endpoints, see [Making requests to Amazon ECR Public registries](https://docs.aws.amazon.com/AmazonECR/latest/public/public-ecr-requests.html). There are no additional charges for accessing Amazon ECR over IPv6. For more information about pricing, see [Amazon Elastic Container Registry pricing](https://aws.amazon.com/ecr/pricing/). @@ -51 +51 @@ To make a request to an Amazon ECR registry over IPv6, you need to use a dual-st - * You must update any AWS Identity and Access Management (IAM) or registry policies that use source IP address filtering to include IPv6 address ranges. For more information, see . + * You must update any AWS Identity and Access Management (IAM) or registry policies that use source IP address filtering to include IPv6 address ranges. For more information, see Using IPv6 addresses in IAM policies.