github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/ecr/AVD-AWS-0033/docs.md (about) 1 2 Images in the ECR repository are encrypted by default using AWS managed encryption keys. To increase control of the encryption and control the management of factors like key rotation, use a Customer Managed Key. 3 4 ### Impact 5 Using AWS managed keys does not allow for fine grained control 6 7 <!-- DO NOT CHANGE --> 8 {{ remediationActions }} 9 10 ### Links 11 - https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html 12 13