Benchmark: ECR Checks

ECR Checks

Elastic Container Registry (ECR) is a fully managed container registry service. While it's relatively inexpensive, unused repositories and images still incur storage costs and can create clutter.

Variables

This control uses the following variables:

Variable	Description	Default
`ecr_repository_image_age_max_days`	The number of days an ECR repository can go without image pulls before being considered unused.	90

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-aws-thrifty

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select ECR Checks.

Run this benchmark in your terminal:

powerpipe benchmark run aws_thrifty.benchmark.ecr

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run aws_thrifty.benchmark.ecr --share

Controls

ECR repositories with unused images should be reviewed

Benchmark: ECR Checks

ECR Checks

Variables

Usage

Controls

Tags