Skip to content

[FEATURE] Amazon Inspector ECR re-scan settings - allow for more options #300

Open
@joegajeckyj

Description

@joegajeckyj

Is your feature request related to a problem? Please describe

Currently only able to set the re-scan duration for inspector to LIFETIME|DAYS_30|DAYS_180

params.update(parameter_pattern_validator("ECR_SCAN_DURATION", os.environ.get("ECR_SCAN_DURATION"), pattern=r"^(LIFETIME|DAYS_30|DAYS_180){1}$"))

Describe the solution you'd like

Allow all the selections that the API accepts i.e.

response = client.update_configuration(
    ec2Configuration={
        'scanMode': 'EC2_SSM_AGENT_BASED'|'EC2_HYBRID'
    },
    ecrConfiguration={
        'pullDateRescanDuration': 'DAYS_14'|'DAYS_30'|'DAYS_60'|'DAYS_90'|'DAYS_180',
        'rescanDuration': 'LIFETIME'|'DAYS_30'|'DAYS_180'|'DAYS_14'|'DAYS_60'|'DAYS_90'
    }
)

Describe alternatives you've considered

we have set to 30 for now while we await the ability to set lower

Additional context

Parameter setting in sra-inspector-org-main-ssm.json
{
"ParameterKey": "pEcrRescanDuration",
"ParameterValue": "LIFETIME"
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions