ecr: enable enhanced image scanning

[ginglis13]

Describe the feature

Add CDK methods to enable enhanced image scanning for ECR repositories

https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-enhanced.html

Use Case

I would like to enable enhanced image scanning through CDK. The alternative route right now is to create a CFN stack using custom resources that invoke the AWS SDK.

Proposed Solution

Enabling enhanced image scanning is account wide, so updating the ImageScanningConfiguration Interface, which applies to a single repository, doesn't make much sense.

Instead, an ideal solution would be a top level method of aws_ecr, maybe something like:

import * as ecr from 'aws-cdk-lib/aws-ecr';

...


  ecr.EnableEnhancedImageScanning( {
     scanOnPush: true,
     filters: "*",
  });

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

v2

Environment details (OS name and version, etc.)

macOS 13.4

[peterwoodworth]

The alternative route right now is to create a stack using custom resources that invoke the AWS SDK.

Until this is supported in CloudFormation this will remain true