How to log AWS ECS Fargate tasks to AWS config

0

We use AWS config to track resource creation/deletion/modification, we wanted to track the creation/deletion of a AWS ECS Fargate task however it appears AWS config doesn't track ECS tasks only services. Can someone please confirm if this is correct and if it is can AWS please add this as a feature request?

2 Antworten
0

Hello.

As far as I can see from this document, it seems that there are Config rules for task definition, but there are no rules for starting or deleting tasks.
https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html

If AWS managed rules are not available, it may be a good idea to create custom rules yourself.
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

profile picture
EXPERTE
beantwortet vor 5 Monaten
0

AWS::ECS::TaskDefinition is in fact a supported AWS Config Resource type: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#amazonelasticcontainerservice

However, AWS Config does not record when a task is launched, only when the task definition is created or updated. Since launching the task does not modify the task definition, config does not record it

AWS
beantwortet vor 5 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen