AWS imagebuilder: Container pipeline prerequisites for Inspector image scanning
Summary
Adds prerequisites for creating a container pipeline with scanning enabled (Amazon Inspector and Amazon ECR requirements, CollectImageScanFindings step), and fixes a console wording reference.
Security assessment
The addition documents requirements for enabling vulnerability/scanning integration (Amazon Inspector) with Image Builder container pipelines, including the CollectImageScanFindings workflow step. This is security-scanning best-practice guidance rather than remediation of a specific flaw.
Evidence
+To create a container pipeline with scanning enabled, you must meet the Amazon Inspector and Amazon ECR prerequisites. For more information, see [Amazon Inspector integration in Image Builder](./integ-inspector.html). This example specifies custom workflows. Include exactly one `CollectImageScanFindings` step across its test workflows. For more information, see [Create custom images with Image Builder](./create-images.html).
Diff
diff --git a/imagebuilder/latest/userguide/cli-create-container-pipeline.md b/imagebuilder/latest/userguide/cli-create-container-pipeline.md index 79635fc..3be9bb2 100644 --- a//imagebuilder/latest/userguide/cli-create-container-pipeline.md +++ b//imagebuilder/latest/userguide/cli-create-container-pipeline.md @@ -74,0 +75,4 @@ This example configures a container pipeline that checks every Monday at 10:00 A +###### Container pipeline prerequisites + +To create a container pipeline with scanning enabled, you must meet the Amazon Inspector and Amazon ECR prerequisites. For more information, see [Amazon Inspector integration in Image Builder](./integ-inspector.html). This example specifies custom workflows. Include exactly one `CollectImageScanFindings` step across its test workflows. For more information, see [Create custom images with Image Builder](./create-images.html). + @@ -155 +159 @@ Create and update pipelines (container) -Update pipeline from the console +Update pipeline in the console