ECR waste check
ECR No Lifecycle Policy
ecr_no_lifecycle_policy
What it finds
ECR No Lifecycle Policy: one of the ECR checks in the storage optimization group. Checks in this group look for: storage that no workload reads, writes or needs any more: unattached volumes, stale snapshots and backups, data with no lifecycle rule.
Why it costs money
Storage bills per gigabyte-month whether or not anything uses it, and forgotten copies pile up quietly.
How it is detected
ECR repo without lifecycle policy
Detection confidence: MEDIUM. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.
AWS's own tools
AWS flags this too, under "Amazon ECR Repository without lifecycle policy configured".
Checked against the AWS documentation.
Run it yourself
Nothing leaves your machine. The local scan has no telemetry.