Is repository_image_scan_on_push enforced for FedRAMP Moderate Baseline Rev 4?

Yes, Ensure AWS Elastic Container Registry (ECR) repositories have image scanning enabled. The rule is non-compliant if image scanning is not enabled for the ECR repository.

terraform-aws-modules/ecr/aws for FedRAMP Moderate Baseline Rev 4

Controls

1 control from FedRAMP Moderate Baseline Rev 4 apply to this module.

Control	Clause	Change
ECR repositories should have image scan on push enabledecr_repository_image_scan_on_push_enabled RA-5	RA-5