AWS AmazonECR documentation change
Summary
Updated encryption requirements for blob mounting and added limitations regarding pull through cache and disabled blob mounting behavior
Security assessment
The change clarifies existing encryption requirements but does not address any security vulnerability. The added notes about pull through cache and disabled blob mounting are feature limitations with no security implications mentioned.
Diff
diff --git a/AmazonECR/latest/userguide/blob-mounting.md b/AmazonECR/latest/userguide/blob-mounting.md index ef0ccb700..6b93a0095 100644 --- a//AmazonECR/latest/userguide/blob-mounting.md +++ b//AmazonECR/latest/userguide/blob-mounting.md @@ -21 +21,5 @@ OCI clients automatically include mounting parameters if they detect a blob may - * Repositories must use identical encryption configurations. + * Repositories must use identical encryption type and keys. + + * Blob mounting is not supported for images created via pull through cache. + + * If you decide to disable blob mounting, existing images that were pushed with blob mounting configured will continue to work and layers will remain mounted.