AWS::ImageBuilder::ImagePipeline ImageScanningConfiguration - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::ImageBuilder::ImagePipeline ImageScanningConfiguration

Contains settings for Image Builder image resource and container image scans.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

Properties

EcrConfiguration

Contains Amazon ECR settings for vulnerability scans.

Required: No

Type: EcrConfiguration

Update requires: No interruption

ImageScanningEnabled

Specifies whether Amazon Inspector scans for vulnerabilities when you create a new image, and whether Image Builder saves the findings. Amazon Inspector must be enabled in the account. Image tests must also be enabled. For AMI output, Amazon Inspector scans the test instance. For container output, Amazon Inspector scans the container image that Image Builder pushes to the Amazon ECR repository from your ecrConfiguration settings.

Required: No

Type: Boolean

Update requires: No interruption

ImageScanningTypes

Property description not available.

Required: No

Type: Array of String

Allowed values: TEST_INSTANCE_CVE | ON_DEMAND_AMI_CVE

Minimum: 1

Maximum: 1

Update requires: No interruption

ScanResultCondition

Property description not available.

Required: No

Type: ScanResultCondition

Update requires: No interruption