All checks
Medium
ECS task definitions should configure non-administrator users in Windows container definitions
Flags Amazon ECS Windows task definitions whose container definitions do not set an explicit non-administrator user. Running as the default administrator account grants the container unnecessary privileges.
- service
- ECS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Set a non-administrator user on every Windows container in every ECS task definition.
- Modify the Dockerfile to add a USER directive pointing at a non-administrator account (or set the user field in the container definition).
- Create a new revision of the task definition with the non-administrator user populated.
- Deploy the new revision.
See which of your accounts this check is failing on.
Book a demo