Aikido Scanner for AWS ECR

Introduction

Aikido supports scanning Elastic Container Registry (ECR) images through both AWS Inspector and the Aikido Scanner. Opting for the Aikido Scanner provides several benefits:

• Extended Scanning Capabilities: Scans for licenses and end-of-life (EOL) runtimes for comprehensive security insights.

• Quicker Results: Delivers scan results promptly to accelerate development and deployment processes.

• Targeted Scanning Efficiency: Allows scanning based on specific tags, enhancing relevance and efficiency.

• Continuous Scanning: Unlike AWS Inspector, which scans once at the moment of push, Aikido performs daily scans—even if your image hasn't been updated in 100 days. This means Aikido can identify new Common Vulnerabilities and Exposures (CVEs) in the meantime, which AWS Inspector might miss.

• Inclusive Pricing: Included in every paid plan, offering unlimited scans without the additional costs associated with AWS Inspector's pay-per-push model.

Installing the Aikido Scanner

1. Navigate to Containers Page

2. Connect Registry: Click on 'Connect registry' and select the first option: 'AWS Elastic Container Registry'.

3. Select Aikido Scanner.

   

4. Fill in the Details: Follow the instructions to create an IAM Role and Policy for the necessary permissions, then enter a name of your registry name (you can choose this yourself) and the AWS Role Amazon Resource Name (ARN). This step encompasses setting up the IAM role and policy, as well as providing registry specifics for a complete setup.

   

5. Completion: Once the setup is complete, Aikido will scan the connected registry with the Aikido scanner on a nightly basis..