Can we turn off Cloudwatch logs when running ecs:execute-command API?

Question

We log into our containers from time to time using execute-command and notice that all our activities get logged directly to CloudWatch.

Is there any way to stop your activity logs from going to CloudWatch when using the `execute-command` api? This could easily result in leaking secrets from environment variables as you innocently go about checking things ...

HS · Answer

Hi, you can turn off the logging of the `execute-command` session by setting the `logging` option of your cluster to `NONE`.

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html#ecs-exec-logging

Andrii · Answer

Hello.

Modify your log driver https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html to adjust the logging configuration. He supports various logging drivers, such as json-file, awslogs etc. You can configure the logging driver to meet your specific needs.

Best regards, 
Andrii

Can we turn off Cloudwatch logs when running ecs:execute-command API?

Add your answer

Relevant content