ECR Public
Private or sensitive images are exposed to the public if ECR's public access is not blocked.
Remediation
Do not allow public access in the ECR policy. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository_policy#policy
Metadata
- Severity: medium
- Slug: ecr-public
CWEs
- 284: Improper Access Control
OWASP
- A01:2021: Broken Access Control
