security hub vulnerability

Question

I am trying to pass security hub checks, then i have the vulnerability "ECS containers should run as non-privileged"

How do i address this?

Accepted Answer

Hi,

Have a look at https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html re. boolean "privileged"

Some of your containers run with "privileged" = true. They must all run with privileged = false to pass the hub checks.

Before switching to false, you have to understaned why those currently run with privileged = true.

See for example https://learn.snyk.io/lesson/container-runs-in-privileged-mode/ for good explanations.

Best,

Didier

Conteúdo relevante