Trial and containers #4
Conversation
|
@solorob33 PTAL - once merged I will reorganize in the workshop studio format |
|  | ||
|
|
||
| In the Falcon console, navigate to _Cloud security_ > _Image assessment settings_ (under _Settings_). | ||
| The ECR registry for your AWS account is already registered for image assessments. This allows the |
There was a problem hiding this comment.
Is the registry already registered, or are you anticipating that we'll have that already set up? Related to that, our existing code blocks pushing web-dvwa to ECR because it's assessed in pipeline and the build (ie, push to ECR) fails. To prep the demo, I manually disable the assessment, and I manually registered in ECR. That will need to be addressed. Ryan can automated ECR registration, but we'll still need to manually disable the pipeline scan which I think is a good thing, so the user gets to see the CodeBuild job setup.
There was a problem hiding this comment.
This is based purely on your demo, so if there are additional steps required we'd need to automate or explain those. I think we should keep this lab focused on the KAC prevention so we should get everything preconfigured correctly. In an extension, we can discuss shift left and show how scanning in the pipeline can prevent the image from ever being published.
No description provided.