Amazon ECR now supports managed container image signing to enhance your security posture and eliminate the operational overhead of setting up signing. Container image signing allows you to verify that images are from trusted sources. With managed signing, ECR simplifies setting up container image signing to just a few clicks in the ECR Console or a single API call.
To get started, create a signing rule with an AWS Signer signing profile that specifies parameters such as signature validity period, and which repositories ECR should sign images for. Once configured, ECR automatically signs images as they are pushed using the identity of the entity pushing the image. ECR leverages AWS Signer for signing operations, which handles key material and certificate lifecycle management including generation, secure storage, and rotation. All signing operations are logged through CloudTrail for full auditability.
ECR managed signing is available in all AWS Regions where AWS Signer is available. To learn more, visit the documentation.
Categories: general:products/amazon-ecr,marketing:marchitecture/containers,general:products/aws-govcloud-us
Source: Amazon Web Services
Latest Posts
- (Updated) New flexibility and choice for sharing organizational data across Microsoft 365 and Viva apps [MC1316232]
- AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview)
- (Updated) Microsoft Edge moving to a 2-week release cycle starting with Edge 152 [MC1387532]
- Updates available for Microsoft 365 Apps for Current Channel [MC1393672]
