turbot/aws_compliance

Control: 2 Amazon ECS services should not have public IP addresses assigned to them automatically

Description

This control checks whether Amazon ECS services are configured to automatically assign public IP addresses. This control fails if AssignPublicIP is ENABLED. This control passes if AssignPublicIP is DISABLED.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_ecs_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_ecs_2 --share

SQL

This control uses a named query:

ecs_service_not_publicly_accessible

Tags