High
ECS
Regional
ECS services should not have public IP addresses assigned to them automatically
NIST
Description
Checks whether Amazon ECS services are configured to automatically assign public IP addresses. The control fails if AssignPublicIP is ENABLED.
Remediation
To disable automatic public IP assignment, update the network configuration of the ECS service.
Steps
- Open the Amazon ECS console.
- Navigate to the 'Services' tab.
- Select the service to update.
- Under 'Network Access', ensure 'Auto-assign public IP' is set to 'DISABLED'.
- Save changes and redeploy the service if necessary.
Compliance
NIST