A company is running a containerized application in the AWS Cloud. The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group. The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images. When a new image version is uploaded, the new image version receives a unique tag. The company needs a solution that inspects new image versions for common vulnerabilities and exposures. The solution must automatically delete new image tags that have Critical or High severity findings. The solution also must notify the development team when such a deletion occurs. Which solution meets these requirements?

Question

Accepted Answer

A. Configure scan on push on the repository. Use Amazon EventBridge to invoke an AWS Step

Answer

B. Configure scan on push on the repository. Configure scan results to be pushed to an Amazon

Answer

C. Schedule an AWS Lambda function to start a manual image scan every hour. Configure Amazon

Answer

D. Configure periodic image scan on the repository. Configure scan results to be added to an

A company is running a containerized application in the AWS Cloud. The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances. The EC2…

Question

Options

How the community answered

Explanation

Community Discussion