StartImageScan seems to be disabled when Enhanced scanning is enabled

Question

I would like to use Enhanced scanning for the bulk of my images. Some images require continuous scanning for a longer duration so I have been trying to use the API to automate this scanning daily, for those older important images.

However I get this error: `An error occurred (ValidationException) when calling the StartImageScan operation: This feature is disabled`.

[This page](https://repost.aws/questions/QULimyQ0jrRRSPOmACqj-Pyg/solution-to-delete-new-ecr-images-from-putimage-actions-that-contain-critical-vulnerabilites) seems to say that StartImageScan is disabled when Enhanced scanning is enabled. Is there any way to enable both? I think this would benefit from changing as there is already a limit on the frequency of scans, it seems like a redundant check.

Didier Durand · Answer

Hi,

Based on page https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_StartImageScan.html

```
Starts an image vulnerability scan. An image scan can only be started once per 24 hours 
on an individual image. This limit includes if an image was scanned on initial push. For 
more information, see Image scanning in the Amazon Elastic Container Registry User Guide.
```

So, you may just need to wait at least 24h before starting next one. Was your last one done in last 24h?

Best,

Didier

StartImageScan seems to be disabled when Enhanced scanning is enabled

Add your answer

Relevant content