Security Hub Issue

0

I'm trying to solve the AWS Security Hub issue "ECS containers should be limited to read-only access to root filesystem"

How can I address this.

已提问 7 个月前494 查看次数
1 回答
3
已接受的回答

To resolve this Security Hub finding "[ECS.5] ECS containers should be limited to read-only access to root filesystems", set the parameter "readonlyRootFilesystem" to "false" in the ECSTaskDefinition.

  1. Select a task definition that has container definitions that need to be updated. For each, complete the following steps:
  2. From the drop down, choose Create new revision with JSON.
  3. Add the readonlyRootFilesystem parameter, and set it to **true **in the container definition within the task definition.
  4. Choose Create.

https://docs.aws.amazon.com/securityhub/latest/userguide/ecs-controls.html#ecs-5 https://docs.aws.amazon.com/config/latest/developerguide/ecs-containers-readonly-access.html

profile pictureAWS
已回答 7 个月前
profile picture
专家
已审核 7 天前
profile picture
专家
已审核 7 个月前
  • Totally spot on with the answer here. Just ensure your container/application still launches when set to read only as I see many times that when set to read only the container fails to launch.

  • This solved the problem for me. Thank you

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则