Control: ECS containers should be limited to read-only access to root filesystems
Description
This control checks if ECS containers are limited to read-only access to mounted root filesystems. This control fails if the ReadonlyRootFilesystem parameter in the container definition of ECS task definitions is set to false.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.ecs_task_definition_container_readonly_root_filesystemSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.ecs_task_definition_container_readonly_root_filesystem --shareSQL
This control uses a named query:
ecs_task_definition_container_readonly_root_filesystem