Can we turn off Cloudwatch logs when running ecs:execute-command API?

We log into our containers from time to time using execute-command and notice that all our activities get logged directly to CloudWatch.

Is there any way to stop your activity logs from going to CloudWatch when using the execute-command api? This could easily result in leaking secrets from environment variables as you innocently go about checking things ...

주제

관리 및 거버넌스 컨테이너 AWS Well-Architected 프레임워크

태그

AWS 시스템 관리자 아마존 엘라스틱 컨테이너 서비스 보안

언어

English

Arman

질문됨 8달 전464회 조회

2개 답변

최신
최다 투표
가장 많은 댓글

Hi, you can turn off the logging of the execute-command session by setting the logging option of your cluster to NONE.

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html#ecs-exec-logging

답변함 8달 전

전문가

Gary Mclean

검토됨 8달 전

전문가

Jose Guay

검토됨 8달 전

Hello.

Modify your log driver https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html to adjust the logging configuration. He supports various logging drivers, such as json-file, awslogs etc. You can configure the logging driver to meet your specific needs.

Best regards, Andrii

전문가

Andrii S

답변함 8달 전

Can we turn off Cloudwatch logs when running ecs:execute-command API?

관련 콘텐츠