A company uses Amazon Elastic Container Registry (Amazon ECR) private registries to store container images. A DevOps team needs to ensure that the container images are regularly scanned for software…

Question

Options

• AEnable enhanced scanning for private registries in Amazon ECR.
• BEnable basic continuous scanning for private registries in Amazon ECR.
• CCreate an AWS System Manager Automation document to scan images by using the AWS SDK.
• DCreate an AWS Lambda function that scans all images in Amazon ECR by using the AWS SDK.

• A
  89% (16)
• B
  6% (1)
• C
  6% (1)

Explanation

Amazon ECR enhanced scanning provides automatic scanning for container images stored in private ECR registries. It uses Amazon Inspector to detect vulnerabilities in software packages within the images. This scanning process is integrated directly into ECR, making it a low- overhead and efficient solution for identifying vulnerabilities regularly. With enhanced scanning, the scans are automatically triggered when new images are pushed to the ECR registry and during periodic re-scans of existing images. This ensures that the DevOps team always has up-to-date vulnerability information without the need to configure additional custom solutions. The enhanced scanning feature provides detailed reports on vulnerabilities, categorized by severity. It allows the team to monitor and address vulnerabilities in a timely manner, improving the security of container images. By enabling enhanced scanning in Amazon ECR, the company can automate vulnerability detection with minimal operational overhead while ensuring comprehensive and timely scans of all container images.

No community discussion yet for this question.