Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

ECR repository should have a lifecycle policy to expire old images

AWS_ECR_004 LOW Cost

What it checks

ECR repository: no lifecycle policy is configured.

Where it applies

Terraform: aws_ecr_repository

CloudFormation: AWS::ECR::Repository

How to fix it

  1. Add an aws_ecr_lifecycle_policy that expires untagged images after 14 days and limits tagged images to the most recent 30.

Frameworks

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules