- 重要な情報
- はじめに
- 用語集
- エージェント
- インテグレーション
- OpenTelemetry
- 開発者
- API
- CoScreen
- アプリ内
- インフラストラクチャー
- アプリケーションパフォーマンス
- 継続的インテグレーション
- ログ管理
- セキュリティ
- UX モニタリング
- 管理
Detect when a new image is uploaded to the public ECR. This could be a potential exfil route of data from the cloud. Could be a supply chain effect as well if a company hosts their containers here for consumers.
NOTE: Amazon ECR requires that users have permission to make calls to the ecr-public:GetAuthorizationToken
and sts:GetServiceBearerToken
API through an IAM policy before they can authenticate to a registry and push any images to an Amazon ECR repository.
Detect when @evt.name:PutImage
is used against the ecr-public.amazonaws.com
API.
{{@responseElements.image.imageId.imageDigest}}
is a valid sha256 hash for the container image with a tag of {{@responseElements.image.imageId.imageTag}}
in the {{@responseElements.image.repositoryName}}
repository on AWS Account {{@usr.account_id}}
.