How to log AWS ECS Fargate tasks to AWS config

0

We use AWS config to track resource creation/deletion/modification, we wanted to track the creation/deletion of a AWS ECS Fargate task however it appears AWS config doesn't track ECS tasks only services. Can someone please confirm if this is correct and if it is can AWS please add this as a feature request?

已提问 5 个月前226 查看次数
2 回答
0

Hello.

As far as I can see from this document, it seems that there are Config rules for task definition, but there are no rules for starting or deleting tasks.
https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html

If AWS managed rules are not available, it may be a good idea to create custom rules yourself.
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

profile picture
专家
已回答 5 个月前
0

AWS::ECS::TaskDefinition is in fact a supported AWS Config Resource type: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#amazonelasticcontainerservice

However, AWS Config does not record when a task is launched, only when the task definition is created or updated. Since launching the task does not modify the task definition, config does not record it

AWS
已回答 5 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则