AWS GetAuthorizationToken
Retrieves an ECR authorization token for Docker image operations, seen in container escape and lateral movement chains.
Tag: ECR
ECR
All events with tag ECR.
AWS PutImage
Pushes a container image to ECR, potentially introducing backdoored images into the deployment pipeline.