Enable the ECR integration

Enabling the integration is a quick one-step configuration. This allows you to automatically scan ECR images for vulnerabilities, check their security status and apply image assurance policies to ensure that only approved images are allowed to run.

ECR integration

The wizard takes in following details: * Registry Type * AWS Region * Access delegation Role

For access delegation, add the Role ARN for the CodePipeline by running the following command and inputting the ARN in the wizard.

aws iam get-role --role-name AquaWorkshopCodeBuildKubectlRole --output text --query 'Role.Arn'

ECR registry

Once you have added the information, click on Test Connection to verify connectivity. test connectivity

You can also click on Registry Configuration to enable automatic scanning instead of on-demand.

And finally click on Save to add the integration.