Amazon ECR repository hosting GuardDuty agent
The following sections list the Amazon Elastic Container Registry (Amazon ECR) repositories where GuardDuty hosts the security agent that gets deployed on your Amazon EKS and Amazon ECS clusters.
The prerequisite to Provide ECR permissions and subnet details requires you to provide a task execution role that has certain Amazon Elastic Container Registry (Amazon ECR) permissions. To further restrict these permissions, you can add the Amazon ECR repository URI that hosts the GuardDuty agent for Fargate-Amazon ECS resources.
Contents
The v1.8.1-eks-build.2
is presently the default and latest version of the agent. When you enable GuardDuty automated
configuration for Runtime Monitoring for EKS, GuardDuty will deploy this agent version to your Amazon EKS clusters. For information about
enabling automated agent, see Managing security agent automatically
for Amazon EKS resources.
The following table shows the Amazon ECR repository URIs where GuardDuty security agent version 1.8.1-eks-build.2 for Amazon EKS are hosted.
AWS Region | Amazon ECR repository URI |
---|---|
US West (Oregon) |
|
|
|
Europe (Paris) |
|
|
|
Asia Pacific (Mumbai) |
|
|
|
Asia Pacific (Hyderabad) |
|
|
|
Canada (Central) |
|
|
|
Canada West (Calgary) |
|
- |
|
Middle East (UAE) |
|
|
|
Europe (London) |
|
|
|
US West (N. California) |
|
|
|
US East (N. Virginia) |
|
|
|
US East (Ohio) |
|
|
|
Europe (Ireland) |
|
|
|
South America (São Paulo) |
|
|
|
Europe (Stockholm) |
|
|
|
Europe (Frankfurt) |
|
|
|
Europe (Zurich) |
|
|
|
Asia Pacific (Singapore) |
|
|
|
Asia Pacific (Sydney) |
|
|
|
Asia Pacific (Jakarta) |
|
|
|
Asia Pacific (Tokyo) |
|
|
|
Asia Pacific (Seoul) |
|
|
|
Asia Pacific (Osaka) |
|
|
|
Asia Pacific (Hong Kong) |
|
|
|
Middle East (Bahrain) |
|
|
|
Europe (Milan) |
|
|
|
Europe (Spain) |
|
|
|
Africa (Cape Town) |
|
|
|
Asia Pacific (Melbourne) |
|
|
|
Israel (Tel Aviv) |
|
|
This section provides the Amazon ECR repository for the Amazon EKS agent version 1.8.1 (v1.8.1-eks-build.1). If you're using v1.8.1-eks-build.1, GuardDuty recommends switching to the default agent version 1.8.1 (v1.8.1-eks-build.2). To do so, perform the steps in Updating security agent manually for Amazon EKS resources, and choose v1.8.1-eks-build.2 as your add-on version.
The following table shows the Amazon ECR repositories for v1.8.1-eks-build.1.
AWS Region |
Amazon ECR repository URI |
---|---|
US West (Oregon) |
|
Europe (Paris) |
|
Asia Pacific (Mumbai) |
|
Asia Pacific (Hyderabad) |
|
Canada (Central) |
|
Middle East (UAE) |
|
Europe (London) |
|
US West (N. California) |
|
US East (N. Virginia) |
|
US East (Ohio) |
|
Europe (Ireland) |
|
South America (São Paulo) |
|
Europe (Stockholm) |
|
Europe (Frankfurt) |
|
Europe (Zurich) |
|
Asia Pacific (Singapore) |
|
Asia Pacific (Sydney) |
|
Asia Pacific (Jakarta) |
|
Asia Pacific (Tokyo) |
|
Asia Pacific (Seoul) |
|
Asia Pacific (Osaka) |
|
Asia Pacific (Hong Kong) |
|
Middle East (Bahrain) |
|
Europe (Milan) |
|
Europe (Spain) |
|
Africa (Cape Town) |
|
Asia Pacific (Melbourne) |
|
Israel (Tel Aviv) |
|
The following table shows the Amazon ECR repositories that hosts the GuardDuty agent for AWS Fargate (Amazon ECS only) for each AWS Region.
AWS Region |
Amazon ECR repository URI |
---|---|
US West (Oregon) |
|
Europe (Paris) |
|
Asia Pacific (Mumbai) |
|
Asia Pacific (Hyderabad) |
|
Canada (Central) |
|
Middle East (UAE) |
|
Europe (London) |
|
US West (N. California) |
|
US East (N. Virginia) |
|
US East (Ohio) |
|
Europe (Ireland) |
|
South America (São Paulo) |
|
Europe (Stockholm) |
|
Europe (Frankfurt) |
|
Europe (Zurich) |
|
Asia Pacific (Singapore) |
|
Asia Pacific (Sydney) |
|
Asia Pacific (Jakarta) |
|
Asia Pacific (Tokyo) |
|
Asia Pacific (Seoul) |
|
Asia Pacific (Osaka) |
|
Asia Pacific (Hong Kong) |
|
Middle East (Bahrain) |
|
Europe (Milan) |
|
Europe (Spain) |
|
Africa (Cape Town) |
|
Asia Pacific (Melbourne) |
|
Israel (Tel Aviv) |
|