Class CcRepository

CloudKitect ECR Repository component used for creating ECR repositories.

Default Configuration

Lifecycle policy: Last 15 images max Encryption: KMS (AWS Managed Keys) Removal Policy: Always Retain Image Immutable: true

Default Alarms

Examples

Default Usage

new CcRepository(this, "LogicalId", {});
Copy

Custom Configuration

new CcRepository(this, "LogicalId", {
   imageScanOnPush: false
});
Copy

Compliance

It addresses the following compliance requirements

1. Enable scan on image push

   • Risk Level: Medium
   • Compliance: NA
   • Well Architected Pillar: Security

2. Lifecycle policy

   • Risk Level: Low
   • Compliance: NA
   • Well Architected Pillar: Cost Optimization, Operational Excellence

3. Repository should be encrypted

   • Risk Level: Medium
   • Compliance: NA
   • Well Architected Pillar: Security

4. Images tags should be immutable

   • Risk Level: Medium
   • Compliance: NA
   • Well Architected Pillar: Security, Operational Excellence