AWS Security ChangesHomeSearch

AWS AmazonECR documentation change

Service: AmazonECR · 2025-11-19 · Documentation low

File: AmazonECR/latest/userguide/lp_creation.md

Summary

Added support for archiving images in lifecycle policies, updated match criteria options, and added rule action selection between expire/archive

Security assessment

The changes introduce new archiving functionality and configuration options for lifecycle policies. While this improves data management, there's no evidence of addressing a specific security vulnerability.

Diff

diff --git a/AmazonECR/latest/userguide/lp_creation.md b/AmazonECR/latest/userguide/lp_creation.md
index 7a2e17ad7..cac84eb97 100644
--- a//AmazonECR/latest/userguide/lp_creation.md
+++ b//AmazonECR/latest/userguide/lp_creation.md
@@ -9 +9 @@ Prerequisite
-Use a lifecycle policy to create a set of rules that expire unused repository images. After creating a lifecycle policy, the affected images are expired within 24 hours.
+Use a lifecycle policy to create a set of rules that expire or archive unused repository images. After creating a lifecycle policy, the affected images are expired or archived within 24 hours.
@@ -17 +17 @@ If you are using Amazon ECR replication to make copies of a repository across di
-**Best practice:** Create a lifecycle policy preview to verify that the images expired by your lifecycle policy rules are what you intend. For instructions, see [Creating a lifecycle policy preview in Amazon ECR](./lpp_creation.html).
+**Best practice:** Create a lifecycle policy preview to verify that the images expired or archived by your lifecycle policy rules are what you intend. For instructions, see [Creating a lifecycle policy preview in Amazon ECR](./lpp_creation.html).
@@ -49 +49 @@ There is a maximum limit of four wildcards (`*`) per string. For example, `["*te
-    6. For **Match criteria** , choose either **Since image pushed** or **Image count more than** and then specify a value.
+    6. For **Match criteria** , choose **Days since image created** , **Days since last recorded pull time** , **Days since image archived** , or **Image count** and then specify a value.
@@ -51 +51,3 @@ There is a maximum limit of four wildcards (`*`) per string. For example, `["*te
-    7. Choose **Save**.
+    7. For **Rule action** , choose either **Expire** or **Archive**.
+
+    8. Choose **Save**.