All checks

Medium ECR · regional

ECR private repositories should have tag immutability configured

Confirms that private ECR repositories have tag immutability enabled, preventing image tags from being overwritten.

service: ECR
severity: Medium
scope: evaluated in every region

How to fix it

To configure tag immutability for an ECR repository, refer to the Amazon Elastic Container Registry User Guide.

Open the Amazon ECR console.
Choose the repository.
Under the Image Tag Mutability section, select 'Immutable'.
Save the changes.

See which of your accounts this check is failing on.

Book a demo