🚀 Submit a Challenge — SecDim AppSec Village CTF at DEF CON 34 and Win a ROG Xbox Ally

ECR Image Mutable

To prevent malicious modification of existing container images, image tags must be set to immutable.

Remediation

Enable image immutability on the image tag. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

Metadata

  • Severity: informational
  • Slug: ecr-image-mutable

OWASP

  • A05:2021: Security Misconfiguration

Available Labs

Open Aws labs in SecDim Play for this vulnerability.

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing — fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.