⭐ Repository → 📁 Compliance Engine → 📁 CloudAware → 📁 AWS → 📁 ECR → 🛡️ Repository Image Tag Mutability is set to Mutable🟢

🧠 AWS ECR Repository Image Tag Mutability is set to Mutable - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 AWS ECR Repository
• 🔌 AWS ECR Repository - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-10-04T12:03:05.276831843Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__imageTagMutability__c') == 'MUTABLE'	✔️ null
🟢	test3	✔️ 299	✔️ setOfText(['IMMUTABLE', 'IMMUTABLE_WITH_EXCLUSION', 'MUTABLE_WITH_EXCLUSION']).contains(extract('CA10__imageTagMutability__c'))	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/aws/ecr/repository-image-tag-mutability/policy.yaml	A5734FB56DE9F7783452C984EEBF39AA
Open	/ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml	034A9EFBCBC5DEC28A4FEF7E33373F98
Open	/ce/ca/aws/ecr/repository-image-tag-mutability/test-data.json	EF55D2DC6A79314E56699E38611796D4
Open	/types/CA10__CaAwsEcrRepository__c/object.extracts.yaml	B0BC5F2B3D6A5EE7EDEC92352F9935A7

Available Commands

repo-manager policies generate FULL /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/ecr/repository-image-tag-mutability/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAwsEcrRepository__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaAwsEcrRepository__c/object.extracts.yaml
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "Image tag mutability is set to MUTABLE, allowing image tags to be overwritten."
    remediationMessage: "Consider setting image tag mutability to IMMUTABLE to prevent overwriting image tags."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__imageTagMutability__c"
        right:
          TEXT: "MUTABLE"
  - status: "COMPLIANT"
    currentStateMessage: "Image tag mutability is set to have immutable tags."
    check:
      CONTAINS:
        arg:
          SET:
            itemType: "TEXT"
            items:
              - "IMMUTABLE"
              - "IMMUTABLE_WITH_EXCLUSION"
              - "MUTABLE_WITH_EXCLUSION"
        search:
          EXTRACT: "CA10__imageTagMutability__c"
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected values in the field."