View a markdown version of this page

AWS::ImageBuilder::Image ImageScanningConfiguration - AWS CloudFormation

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::ImageBuilder::Image ImageScanningConfiguration

Contains settings for Image Builder image resource and container image scans.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

Properties

EcrConfiguration

Contains Amazon ECR settings for vulnerability scans.

Required: No

Type: EcrConfiguration

Update requires: Replacement

ImageScanningEnabled

Specifies whether Amazon Inspector scans for vulnerabilities when you create a new image, and whether Image Builder saves the findings. Amazon Inspector must be enabled in the account. Image tests must also be enabled. For AMI output, Amazon Inspector scans the test instance. For container output, Amazon Inspector scans the container image that Image Builder pushes to the Amazon ECR repository from your ecrConfiguration settings.

Required: No

Type: Boolean

Update requires: Replacement