High
ECS
Regional
ECS containers should run as non-privileged
NIST
Description
Flags ECS task definitions with containers that have the privileged parameter set to true.
Remediation
To configure the privileged parameter on a task definition, update the task definition to set 'privileged' to false for each container definition.
Steps
- Open the Amazon ECS console.
- Navigate to the 'Task Definitions' tab.
- Select the task definition to update.
- Edit each container definition and ensure 'privileged' is set to false.
- Update the task definition.
Compliance
NIST