AWS AmazonECR high security documentation change
Summary
Added note about image scanning behavior for restored archived images
Security assessment
Explicitly states that restored archived images undergo new scans, addressing potential security risks from outdated vulnerability scans. This directly impacts security posture by ensuring fresh scans after restoration.
Diff
diff --git a/AmazonECR/latest/userguide/image-scanning-basic-enabling.md b/AmazonECR/latest/userguide/image-scanning-basic-enabling.md index ea7eb6f9a..3fc919cfd 100644 --- a//AmazonECR/latest/userguide/image-scanning-basic-enabling.md +++ b//AmazonECR/latest/userguide/image-scanning-basic-enabling.md @@ -22,0 +23,4 @@ You can use the following steps to define one or more scan on push filters. +###### Note + +If scan on push is enabled for a repository, scans are also done on images that are restored after being archived. No old scans will be available from the restored image. +