Amazon Elastic Container Registry (ECR) extended its pull through cache feature to automatically discover and synchronize OCI referrers such as image signatures, Software Bill of Materials (SBOMs), and attestations from upstream registries into customer private repositories. Previously, users needed to manually fetch these related artifacts when using pull through cache, limiting seamless security and compliance workflows.
This enhancement supports end-to-end image signature verification and SBOM discovery directly from cached repositories without client-side workarounds. The feature is deployed across all AWS regions offering Amazon ECR pull through cache. AWS positions it as improving integrity verification processes for container images, though independent validation of operational impacts has not been published.
Source & further reading
Amazon ECR Pull Through Cache Now Supports Referrer Discovery and Sync ↗Source published 2026-04-17. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.