High
ECS
Regional
ECS task sets should not automatically assign public IP addresses
PCI DSS v4.0.1PCI DSS v1.4.4
Description
Flags ECS task sets configured to automatically assign public IP addresses (AssignPublicIP set to ENABLED).
Remediation
To ensure ECS task sets don't automatically assign public IP addresses, configure the network settings to disable public IP assignment.
Steps
- Navigate to the Amazon ECS console
- Select your service and task set
- Choose 'Update service' or 'Edit task set'
- In the 'Networking' section, ensure 'Public IP' is set to 'Disabled'
- Save the configuration to apply the changes
- Verify that the task set is not using public IP addresses
Compliance
PCI DSS v4.0.1PCI DSS v1.4.4