AWS ECR Tables

The AWS ECR uses the following tables

Tables

AWSECRAccountSettings

Stores registry-level configuration settings that control behavior and features for Amazon ECR accounts.

NameTypeDescription
ConfigIDintegerIdentifier linking this account setting record to its configuration or ingestion context.
IDintegerUnique identifier for the account setting record.
RegistryIDstringIdentifier of the Amazon ECR registry the setting applies to.
SettingNamestringName of the registry-level configuration setting.
SettingValuestringValue assigned to the registry setting.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECREnhancedImageScanFindings

Contains vulnerability findings produced by enhanced image scanning for Amazon ECR container images.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
FindingARNstringAmazon Resource Name (ARN) of the Finding resource.
AWSECRImageIDuniqueidentifierIdentifier of the associated AWSECRImage resource.
AWSECRImageDigeststringValue of AWSECRImage Digest.
AWSAccountIDstringIdentifier of the associated AWSAccount resource.
DescriptionstringDescriptive text providing details about the resource.
ExploitAvailablestringValue of Exploit Available.
FirstObservedAtdatetimeTimestamp for first observed at.
FixAvailablestringValue of Fix Available.
LastObservedAtdatetimeTimestamp for last observed at.
PackageVulnerabilityDetailsJsonstringJSON representation of Package Vulnerability Details configuration or data.
RemediationJsonstringJSON representation of Remediation configuration or data.

AWSECRImageReferrers

Tracks artifacts that reference container images, such as signatures or metadata objects.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRImageIDuniqueidentifierIdentifier of the associated AWSECRImage resource.
AWSECRImageDigeststringValue of AWSECRImage Digest.
ArtifactDigeststringValue of Artifact Digest.
ArtifactTypestringValue of Artifact Type.
MediaTypestringValue of Media Type.
SizeInBytesbigintSize value expressed in bytes.
ArtifactStatusstringCurrent status of the resource.
AnnotationsJsonstringJSON representation of Annotations configuration or data.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRImageReplicationStatuses

Records the replication state of container images across AWS Regions.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRImageIDuniqueidentifierIdentifier of the associated AWSECRImage resource.
AWSECRImageDigeststringValue of AWSECRImage Digest.
RegionstringValue of Region.
RegistryIDstringIdentifier of the associated Registry resource.
RepositoryNamestringName of the resource.
StatusstringCurrent status of the resource.
FailureCodestringValue of Failure Code.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRImageScanFindings

Represents AWSECRImage Scan Findings data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRImageIDuniqueidentifierIdentifier of the associated AWSECRImage resource.
AWSECRImageDigeststringValue of AWSECRImage Digest.
FindingNamestringName of the resource.
DescriptionstringDescriptive text providing details about the resource.
SeveritystringSeverity level assigned to the finding.
URIstringValue of URI.
AttributesJsonstringJSON representation of Attributes configuration or data.
RegistryIDstringIdentifier of the associated Registry resource.
RepositoryNamestringName of the resource.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRImageSigningStatuses

Contains inventory records for AWSECRImage Signing Statuses, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRImageIDuniqueidentifierIdentifier of the associated AWSECRImage resource.
AWSECRImageDigeststringValue of AWSECRImage Digest.
SigningProfileARNstringAmazon Resource Name (ARN) of the SigningProfile resource.
StatusstringCurrent status of the resource.
FailureCodestringValue of Failure Code.
FailureReasonstringValue of Failure Reason.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRImages

Stores resource metadata and configuration details for AWSECRImages.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDuniqueidentifierUnique identifier for the record.
ArtifactMediaTypestringValue of Artifact Media Type.
ImageDigeststringContent digest that uniquely identifies the image.
ImageManifestMediaTypestringValue of Image Manifest Media Type.
ImagePushedAtdatetimeTimestamp for image pushed at.
FindingSeverityCountsJsonstringJSON representation of Finding Severity Counts configuration or data.
ImageScanCompletedAtdatetimeTimestamp for image scan completed at.
VulnerabilitySourceUpdatedAtdatetimeTimestamp for vulnerability source updated at.
ImageScanDescriptionstringValue of Image Scan Description.
ImageScanStatusstringCurrent status of the resource.
ImageSizeInBytesbigintSize value expressed in bytes.
ImageTagsJsonstringJSON representation of Image Tags configuration or data.
LastRecordedPullTimedatetimeTimestamp for last recorded pull time.
RegistryIDstringIdentifier of the associated Registry resource.
RepositoryNamestringName of the resource.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRLifecyclePolicyPreviewResults

Represents AWSECRLifecycle Policy Preview Results data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRRepositoryARNstringAmazon Resource Name (ARN) of the AWSECRRepository resource.
ImageDigeststringContent digest that uniquely identifies the image.
AppliedRulePriorityintegerNumeric value for applied rule priority.
ActionTypestringValue of Action Type.
ActionTargetStorageClassstringValue of Action Target Storage Class.
ImagePushedAtdatetimeTimestamp for image pushed at.
ImageTagsJsonstringJSON representation of Image Tags configuration or data.
StorageClassstringValue of Storage Class.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRLifecyclePolicyPreviewSummaries

Represents AWSECRLifecycle Policy Preview Summaries data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRRepositoryARNstringAmazon Resource Name (ARN) of the AWSECRRepository resource.
ExpiringImageTotalCountintegerCount value associated with the resource.
TransitioningImageTotalCountsJsonstringJSON representation of Transitioning Image Total Counts configuration or data.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRPullThroughCacheRules

Contains inventory records for AWSECRPull Through Cache Rules, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
ECRRepositoryPrefixstringValue of ECRRepository Prefix.
RegistryIDstringIdentifier of the associated Registry resource.
CredentialARNstringAmazon Resource Name (ARN) of the Credential resource.
CustomRoleARNstringAmazon Resource Name (ARN) of the CustomRole resource.
UpstreamRegistrystringValue of Upstream Registry.
UpstreamRegistryURLstringValue of Upstream Registry URL.
UpstreamRepositoryPrefixstringValue of Upstream Repository Prefix.
CreatedAtdatetimeTimestamp when the resource was created.
UpdatedAtdatetimeTimestamp when the resource was last updated.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRPullTimeUpdateExclusions

Provides a record of AWSECRPull Time Update Exclusions resources, including identifiers and key attributes.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
RegistryIDstringIdentifier of the associated Registry resource.
PrincipalARNstringAmazon Resource Name (ARN) of the Principal resource.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRegistries

Contains inventory records for AWSECRRegistries, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
RegistryIDstringIdentifier of the associated Registry resource.
ReplicationConfigurationJsonstringJSON representation of Replication Configuration configuration or data.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRegistryPolicies

Represents AWSECRRegistry Policies data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
RegistryIDstringIdentifier of the associated Registry resource.
PolicyTextstringValue of Policy Text.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRegistryScanningConfigurations

Represents AWSECRRegistry Scanning Configurations data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
RegistryIDstringIdentifier of the associated Registry resource.
ScanningConfigurationJsonstringJSON representation of Scanning Configuration configuration or data.
RulesJsonstringJSON representation of Rules configuration or data.
ScanTypestringValue of Scan Type.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRepositories

Stores resource metadata and configuration details for AWSECRRepositories.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
AWSECRRepositoryARNstringAmazon Resource Name (ARN) of the AWSECRRepository resource.
RepositoryNamestringName of the resource.
RepositoryURIstringValue of Repository URI.
RegistryIDstringIdentifier of the associated Registry resource.
CreatedAtdatetimeTimestamp when the resource was created.
EncryptionConfigurationEncryptionTypestringValue of Encryption Configuration Encryption Type.
EncryptionConfigurationKMSKeystringValue of Encryption Configuration KMSKey.
ImageScanningConfigurationScanOnPushbooleanIndicates whether image scanning configuration scan on push is enabled or true.
ImageTagMutabilitystringValue of Image Tag Mutability.
LifecyclePolicyTextstringValue of Lifecycle Policy Text.
LifecyclePolicyLastEvaluatedAtdatetimeTimestamp for lifecycle policy last evaluated at.
LifecyclePolicyPreviewTextstringValue of Lifecycle Policy Preview Text.
LifecyclePolicyPreviewStatusstringCurrent status of the resource.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRepositoryCreationTemplates

Contains inventory records for AWSECRRepository Creation Templates, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
TemplatePrefixstringValue of Template Prefix.
RegistryIDstringIdentifier of the associated Registry resource.
AppliedForJsonstringJSON representation of Applied For configuration or data.
CreatedAtdatetimeTimestamp when the resource was created.
UpdatedAtdatetimeTimestamp when the resource was last updated.
CustomRoleARNstringAmazon Resource Name (ARN) of the CustomRole resource.
DescriptionstringDescriptive text providing details about the resource.
EncryptionConfigurationTypestringValue of Encryption Configuration Type.
EncryptionConfigurationKMSKeystringValue of Encryption Configuration KMSKey.
ImageTagMutabilitystringValue of Image Tag Mutability.
ImageTagMutabilityExclusionFiltersJsonstringJSON representation of Image Tag Mutability Exclusion Filters configuration or data.
LifecyclePolicystringValue of Lifecycle Policy.
RepositoryPolicystringValue of Repository Policy.
ResourceTagsJsonstringJSON representation of Resource Tags configuration or data.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRepositoryImageTagMutabilityExclusionFilters

Contains inventory records for AWSECRRepository Image Tag Mutability Exclusion Filters, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRRepositoryARNstringAmazon Resource Name (ARN) of the AWSECRRepository resource.
FilterstringValue of Filter.
FilterTypestringValue of Filter Type.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRRepositoryPolicies

Represents AWSECRRepository Policies data collected from AWS, including configuration and state.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
AWSECRRepositoryARNstringAmazon Resource Name (ARN) of the AWSECRRepository resource.
RepositoryNamestringName of the resource.
RegistryIDstringIdentifier of the associated Registry resource.
PolicyTextstringValue of Policy Text.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.

AWSECRSigningRules

Contains inventory records for AWSECRSigning Rules, capturing metadata and related settings.

NameTypeDescription
ConfigIDintegerIdentifier linking this record to its configuration or ingestion context.
IDintegerUnique identifier for the record.
RegistryIDstringIdentifier of the associated Registry resource.
SigningProfileARNstringAmazon Resource Name (ARN) of the SigningProfile resource.
RuleOrderintegerNumeric value for rule order.
RepositoryFiltersJsonstringJSON representation of Repository Filters configuration or data.
BatchDatedatetimeTimestamp indicating when this record was last ingested or updated.


Did this page help you?