🚀 Join our AI Wargame at Black Hat Asia and our Workshop + Wargame at NDC Sydney .

ECR Image Mutable

To prevent malicious modification of existing container images, image tags must be set to immutable.

Remediation

Enable image immutability on the image tag. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

Metadata

  • Severity: informational
  • Slug: ecr-image-mutable

OWASP

  • A05:2021: Security Misconfiguration

Available Labs

Open Aws labs in SecDim Play for this vulnerability.

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing — fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.