pulumi-aws-kotlin/com.pulumi.aws.ecr.kotlin/RegistryScanningConfiguration

RegistryScanningConfiguration

class RegistryScanningConfiguration : KotlinCustomResource

Provides an Elastic Container Registry Scanning Configuration. Can't be completely deleted, instead reverts to the default BASIC scanning configuration without rules.

Example Usage

Basic example

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ecr.RegistryScanningConfiguration;
import com.pulumi.aws.ecr.RegistryScanningConfigurationArgs;
import com.pulumi.aws.ecr.inputs.RegistryScanningConfigurationRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var configuration = new RegistryScanningConfiguration("configuration", RegistryScanningConfigurationArgs.builder()
            .rules(RegistryScanningConfigurationRuleArgs.builder()
                .repositoryFilters(RegistryScanningConfigurationRuleRepositoryFilterArgs.builder()
                    .filter("example")
                    .filterType("WILDCARD")
                    .build())
                .scanFrequency("CONTINUOUS_SCAN")
                .build())
            .scanType("ENHANCED")
            .build());
    }
}

Multiple rules

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ecr.RegistryScanningConfiguration;
import com.pulumi.aws.ecr.RegistryScanningConfigurationArgs;
import com.pulumi.aws.ecr.inputs.RegistryScanningConfigurationRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var test = new RegistryScanningConfiguration("test", RegistryScanningConfigurationArgs.builder()
            .rules(
                RegistryScanningConfigurationRuleArgs.builder()
                    .repositoryFilters(RegistryScanningConfigurationRuleRepositoryFilterArgs.builder()
                        .filter("*")
                        .filterType("WILDCARD")
                        .build())
                    .scanFrequency("SCAN_ON_PUSH")
                    .build(),
                RegistryScanningConfigurationRuleArgs.builder()
                    .repositoryFilters(RegistryScanningConfigurationRuleRepositoryFilterArgs.builder()
                        .filter("example")
                        .filterType("WILDCARD")
                        .build())
                    .scanFrequency("CONTINUOUS_SCAN")
                    .build())
            .scanType("ENHANCED")
            .build());
    }
}

Import

ECR Scanning Configurations can be imported using the registry_id, e.g.,

$ pulumi import aws:ecr/registryScanningConfiguration:RegistryScanningConfiguration example 012345678901

Properties

val id: Output<String>

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

registryId

val registryId: Output<String>

The registry ID the scanning configuration applies to.

rules

val rules: Output<List<RegistryScanningConfigurationRule>>?

One or multiple blocks specifying scanning rules to determine which repository filters are used and at what frequency scanning will occur. See below for schema.

scanType

val scanType: Output<String>

the scanning type to set for the registry. Can be either ENHANCED or BASIC.

urn

val urn: Output<String>