---
title: ecr
---

# ecr

## Checks


- [enable-image-scans](enable-image-scans) ECR repository has image scans disabled.

- [enforce-immutable-repository](enforce-immutable-repository) ECR images tags shouldn't be mutable.

- [no-public-access](no-public-access) ECR repository policy must block public access

- [repository-customer-key](repository-customer-key) ECR Repository should use customer managed keys to allow more control



