To prevent malicious modification of existing container images, image tags must be set to immutable.

Remediation

Enable image immutability on the image tag. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

Metadata

• Severity: informational
• Slug: ecr-image-mutable

OWASP

• A05:2021: Security Misconfiguration