security hub vulnerability

0

I am trying to pass security hub checks, then i have the vulnerability "ECS containers should run as non-privileged"

How do i address this?

asked 6 months ago140 views
1 Answer
1
Accepted Answer

Hi,

Have a look at https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html re. boolean "privileged"

Some of your containers run with "privileged" = true. They must all run with privileged = false to pass the hub checks.

Before switching to false, you have to understaned why those currently run with privileged = true.

See for example https://learn.snyk.io/lesson/container-runs-in-privileged-mode/ for good explanations.

Best,

Didier

profile pictureAWS
EXPERT
answered 6 months ago
profile picture
EXPERT
reviewed 6 months ago
  • Thanks so much. It solved the problem for me.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions