Medium
ECS
Regional
ECS task definitions should not use host network mode
NIST 800-53
Description
This control checks whether the latest active revision of an Amazon ECS task definition uses host network mode. The control fails if the latest active revision of the ECS task definition uses host network mode.
Remediation
To ensure ECS task definitions don't use host network mode, configure the network mode to use bridge, awsvpc, or none instead of host.
Steps
- Navigate to the Amazon ECS console
- Select your task definition
- Choose 'Edit' and go to the 'Networking' section
- Change the 'Network mode' from 'host' to 'bridge', 'awsvpc', or 'none'
- Update any port mappings if necessary
- Save the task definition with the new network configuration
Compliance
NIST 800-53