security hub vulnerability

0

I am trying to pass security hub checks, then i have the vulnerability "ECS containers should run as non-privileged"

How do i address this?

preguntada hace 7 meses151 visualizaciones
1 Respuesta
2
Respuesta aceptada

Hi,

Have a look at https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html re. boolean "privileged"

Some of your containers run with "privileged" = true. They must all run with privileged = false to pass the hub checks.

Before switching to false, you have to understaned why those currently run with privileged = true.

See for example https://learn.snyk.io/lesson/container-runs-in-privileged-mode/ for good explanations.

Best,

Didier

profile pictureAWS
EXPERTO
respondido hace 7 meses
profile picture
EXPERTO
revisado hace un día
profile picture
EXPERTO
revisado hace 7 meses
  • Thanks so much. It solved the problem for me.

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas