turbot/aws_compliance
Loading controls...

Control: ECS containers should be limited to read-only access to root filesystems

Description

This control checks if ECS containers are limited to read-only access to mounted root filesystems. This control fails if the ReadonlyRootFilesystem parameter in the container definition of ECS task definitions is set to false.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.ecs_task_definition_container_readonly_root_filesystem

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.ecs_task_definition_container_readonly_root_filesystem --share

SQL

This control uses a named query:

ecs_task_definition_container_readonly_root_filesystem

Tags