How to log AWS ECS Fargate tasks to AWS config

0

We use AWS config to track resource creation/deletion/modification, we wanted to track the creation/deletion of a AWS ECS Fargate task however it appears AWS config doesn't track ECS tasks only services. Can someone please confirm if this is correct and if it is can AWS please add this as a feature request?

2回答
0

Hello.

As far as I can see from this document, it seems that there are Config rules for task definition, but there are no rules for starting or deleting tasks.
https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html

If AWS managed rules are not available, it may be a good idea to create custom rules yourself.
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

profile picture
エキスパート
回答済み 5ヶ月前
0

AWS::ECS::TaskDefinition is in fact a supported AWS Config Resource type: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#amazonelasticcontainerservice

However, AWS Config does not record when a task is launched, only when the task definition is created or updated. Since launching the task does not modify the task definition, config does not record it

AWS
回答済み 5ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ