security hub vulnerability

0

I am trying to pass security hub checks, then i have the vulnerability "ECS containers should run as non-privileged"

How do i address this?

已提问 7 个月前151 查看次数
1 回答
2
已接受的回答

Hi,

Have a look at https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html re. boolean "privileged"

Some of your containers run with "privileged" = true. They must all run with privileged = false to pass the hub checks.

Before switching to false, you have to understaned why those currently run with privileged = true.

See for example https://learn.snyk.io/lesson/container-runs-in-privileged-mode/ for good explanations.

Best,

Didier

profile pictureAWS
专家
已回答 7 个月前
profile picture
专家
已审核 2 天前
profile picture
专家
已审核 7 个月前
  • Thanks so much. It solved the problem for me.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则