High
ECS
Regional
ECS task definitions should have a logging configuration
NIST 800-53ISO 27001HIPAA
Description
Confirms that the latest active ECS task definition has a logging configuration with a valid logDriver specified for all container definitions.
Remediation
To enable logging for your ECS task definitions, you need to configure the logConfiguration property in your container definitions.
Steps
- Navigate to the Amazon ECS console
- Select your task definition
- Choose 'Edit' and go to the container definition
- In the 'Logging' section, select a log driver (e.g., awslogs, fluentd, syslog)
- Configure the log options for your chosen driver
- Save the task definition with the logging configuration
Compliance
NIST 800-53ISO 27001HIPAA