Views:

Before proceeding with the scan, set up TMAS, then install Docker.

  1. Login to AWS CLI using the following command:

    $ aws configure

     
    Prepare an IAM user that has ECR access permission that you will use for the command above.
     
  2. Authenticate to your default Elastic Container Registry using the following command:

    aws ecr get-login-password --region region | docker login --username AWS --password-stdin aws_account_id.dkr.ecr.region.amazonaws.com

  3. Run the TMAS scan command:

    ./tmas scan registry:aws_account_id.dkr.ecr.us-east-2.amazonaws.com/yourimage:tag

For more information, refer to the AWS article, Using Amazon ECR with the AWS CLI.