AWS AmazonECR documentation change
Summary
Added documentation for pull-time update exclusion feature to prevent last pull time updates
Security assessment
The new feature helps prevent lifecycle policies from affecting specific images, which could be considered a security-adjacent control mechanism. However, it's primarily a feature enhancement rather than addressing a specific vulnerability.
Diff
diff --git a/AmazonECR/latest/userguide/registry-settings.md b/AmazonECR/latest/userguide/registry-settings.md index f9b6e2b1f..bd39643ce 100644 --- a//AmazonECR/latest/userguide/registry-settings.md +++ b//AmazonECR/latest/userguide/registry-settings.md @@ -18,0 +19,2 @@ Amazon ECR uses private registry settings to configure features at the registry + * **Pull-time update exclusion** – You can configure pull-time update exclusions to prevent the last pull time from being updated for specific images when they are pulled. This is useful for images that are used for testing or CI/CD purposes where you don't want the pull time to affect lifecycle policy decisions. For more information, see [Pull-time update exclusions](./pull-time-update-exclusions.html). +