View a markdown version of this page

AWS::ImageBuilder::Image ImageScanningConfiguration - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::ImageBuilder::Image ImageScanningConfiguration

Contains settings for Image Builder image resource and container image scans.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

Properties

EcrConfiguration

Contains Amazon ECR settings for vulnerability scans.

Required: No

Type: EcrConfiguration

Update requires: Replacement

ImageScanningEnabled

Specifies whether Amazon Inspector scans for vulnerabilities when you create a new image, and whether Image Builder saves the findings. Amazon Inspector must be enabled in the account. Image tests must also be enabled. For AMI output, Amazon Inspector scans the test instance. For container output, Amazon Inspector scans the container image that Image Builder pushes to the Amazon ECR repository from your ecrConfiguration settings.

Required: No

Type: Boolean

Update requires: Replacement