A team uses private Amazon ECR registries and needs container images to be scanned regularly for package vulnerabilities. What action fulfills this requirement?

Enabling enhanced scanning for private registries in Amazon ECR is the correct solution. This feature automatically scans new images pushed to ECR and continuously rescans existing images for new vulnerabilities, providing the required regular scanning. Basic continuous scanning is not a native ECR feature; ECR offers basic scanning (on push) or enhanced scanning (on push and continuous). Creating a Systems Manager Automation document or a Lambda function to scan images via the AWS SDK would involve significant custom development and maintenance overhead, duplicating functionality already provided by ECR's enhanced scanning. These custom solutions would also likely be less efficient and comprehensive than the native service.