ECR repository policies should not allow wildcard principals

ecr
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

ECR repository resource policies should not grant access to wildcard principals (Principal: "*"). Wildcard principals allow any AWS account or unauthenticated user to access the resource, creating a significant security risk.

Remediation

Update the repository policy to specify explicit AWS account IDs or IAM principals. For guidance, refer to Repository policies.