How to log AWS ECS Fargate tasks to AWS config

0

We use AWS config to track resource creation/deletion/modification, we wanted to track the creation/deletion of a AWS ECS Fargate task however it appears AWS config doesn't track ECS tasks only services. Can someone please confirm if this is correct and if it is can AWS please add this as a feature request?

preguntada hace 5 meses226 visualizaciones
2 Respuestas
0

Hello.

As far as I can see from this document, it seems that there are Config rules for task definition, but there are no rules for starting or deleting tasks.
https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html

If AWS managed rules are not available, it may be a good idea to create custom rules yourself.
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

profile picture
EXPERTO
respondido hace 5 meses
0

AWS::ECS::TaskDefinition is in fact a supported AWS Config Resource type: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#amazonelasticcontainerservice

However, AWS Config does not record when a task is launched, only when the task definition is created or updated. Since launching the task does not modify the task definition, config does not record it

AWS
respondido hace 5 meses

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas