ECR scan

[NMuee]

Hello Prowler team,

I have a question on ECR scan

In prowler 3.0, [Check if ECR repositories have lifecycle policies enabled]
I have ECR lifecycle policies set, however it is being flagged as FAILED in prowler 3.0, but PASS in prowler 2.0 [extra7194].

May need the team help to understand why, thank you.

[jfagoagas]

Hi @NMuee, could you please execute Prowler with the --log-level ERROR flag and paste the output here?

In Prowler v3 that check raises a PASS if the audited ECR repository has a lifecycle policy as you can see here https://github.com/prowler-cloud/prowler/blob/master/prowler/providers/aws/services/ecr/ecr_repositories_lifecycle_policy_enabled/ecr_repositories_lifecycle_policy_enabled.py#L17

Maybe there is some kind of error during the execution and Prowler is not being able to retrieve the repository lifecycle policies.

Thanks for using Prowler 🚀

[NMuee]

Executing 1 check, please wait...

2023-05-16 14:33:37,197 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: ap-southeast-3 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,381 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: ap-east-1 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,456 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: ap-south-2 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,565 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: me-central-1 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,605 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: me-south-1 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,705 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: ap-southeast-4 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,767 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: eu-south-1 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:37,974 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: eu-central-2 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:38,133 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: eu-south-2 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
2023-05-16 14:33:38,488 [File: ecr_service.py:62]       [Module: ecr_service]    ERROR: af-south-1 -- ClientError[41]: An error occurred (UnrecognizedClientException) when calling the DescribeRepositories operation: The security token included in the request is invalid.
-> Scan completed! |▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉| 1/1 [100%] in 3.0s

Above message is output after running with --log-level ERROR
All my resources are in ap-southeast-1

[jfagoagas]

Could you show us the configuration you have for the ECR?

[NMuee]

[jfagoagas]

I'm going to transfer this discussion to an issue. Thanks!

#2369