Security Hub Issue

0

I'm trying to solve the AWS Security Hub issue "ECS containers should be limited to read-only access to root filesystem"

How can I address this.

已提問 7 個月前檢視次數 494 次
1 個回答
3
已接受的答案

To resolve this Security Hub finding "[ECS.5] ECS containers should be limited to read-only access to root filesystems", set the parameter "readonlyRootFilesystem" to "false" in the ECSTaskDefinition.

  1. Select a task definition that has container definitions that need to be updated. For each, complete the following steps:
  2. From the drop down, choose Create new revision with JSON.
  3. Add the readonlyRootFilesystem parameter, and set it to **true **in the container definition within the task definition.
  4. Choose Create.

https://docs.aws.amazon.com/securityhub/latest/userguide/ecs-controls.html#ecs-5 https://docs.aws.amazon.com/config/latest/developerguide/ecs-containers-readonly-access.html

profile pictureAWS
已回答 7 個月前
profile picture
專家
已審閱 7 天前
profile picture
專家
已審閱 7 個月前
  • Totally spot on with the answer here. Just ensure your container/application still launches when set to read only as I see many times that when set to read only the container fails to launch.

  • This solved the problem for me. Thank you

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南