AWS AmazonECR documentation change
Summary
Added documentation for Enhanced Image Scanning's new image usage insights feature, showing EKS/ECS usage data to prioritize vulnerability remediation
Security assessment
The change documents a security-adjacent feature improvement (vulnerability prioritization based on runtime usage) but does not address a specific security vulnerability. It enhances security documentation by explaining how to use the feature for better risk management.
Diff
diff --git a/AmazonECR/latest/userguide/image-scanning-enhanced.md b/AmazonECR/latest/userguide/image-scanning-enhanced.md index 2d8b315de..179b50232 100644 --- a//AmazonECR/latest/userguide/image-scanning-enhanced.md +++ b//AmazonECR/latest/userguide/image-scanning-enhanced.md @@ -30,0 +31,2 @@ Consider the following before enabling Amazon ECR enhanced scanning. + * Amazon ECR enhanced scanning shows how images are used on Amazon EKS and Amazon ECS. You can see when images were last used and identify how many clusters use each image. This information helps you prioritize vulnerability remediation for actively used images. You can quickly determine which clusters might be affected by newly discovered vulnerabilities. For more information about how to request these information and view the response, see [`DescribeImageScanFindings`](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeImageScanFindings.html). +