turbot/aws_compliance

Control: ECS containers should run as non-privileged

Description

This control checks if the privileged parameter in the container definition of AWS ECS Task Definitions is set to true. The control fails if this parameter is equal to true.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.ecs_task_definition_container_non_privileged

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.ecs_task_definition_container_non_privileged --share

SQL

This control uses a named query:

ecs_task_definition_container_non_privileged

Tags