Enabling the integration is a quick one-step configuration. This allows you to automatically scan ECR images for vulnerabilities, check their security status and apply image assurance policies to ensure that only approved images are allowed to run.
The wizard takes in following details: * Registry Type * AWS Region * Access delegation Role
For access delegation, add the Role ARN for the CodePipeline by running the following command and inputting the ARN in the wizard.
aws iam get-role --role-name AquaWorkshopCodeBuildKubectlRole --output text --query 'Role.Arn'
Once you have added the information, click on Test Connection to verify connectivity.
You can also click on Registry Configuration to enable automatic scanning instead of on-demand.
And finally click on Save to add the integration.