Skip to content

Commit 3ccc69c

Browse files
authored
Update README.md
1 parent 4e7594c commit 3ccc69c

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

README.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,18 +13,16 @@ Docker container to run the AWS CLI and related tools (cfn-policy-validator, jq,
1313
## Rational
1414

1515
This image is based on the official
16-
[amazon/aws-cli](https://hub.docker.com/r/amazon/aws-cli) image. The
17-
main difference is that default entrypoint of the official image is
18-
`aws` because it is the only command that this image is meant to run.
19-
On the other hand, this image's default entrypoint is a shell (`bash`)
16+
[public.ecr.aws/amazonlinux/amazonlinux](https://gallery.ecr.aws/amazonlinux/amazonlinux)
17+
image. This image's default entrypoint is a shell (`bash`)
2018
in which you can run not only `aws` but also other commands typically
2119
useful when building a more advanced CI/CD pipeline. For example this
2220
image includes the `jq` utility often very useful to process the
2321
output of the `aws` command. The tool `cfn-policy-validator` is also
2422
included to run IAM policies from a CloudFormation template through
2523
IAM Access Analyzer checks.
2624

27-
Another significant difference with the official image is that this
25+
Another significant difference with the official AWS images is that this
2826
image is not running using the `root` user. Running as `root` should
2927
not be necessary for CI/CD activities and it is considered a security
3028
risk.

0 commit comments

Comments
 (0)