How to log AWS ECS Fargate tasks to AWS config

0

We use AWS config to track resource creation/deletion/modification, we wanted to track the creation/deletion of a AWS ECS Fargate task however it appears AWS config doesn't track ECS tasks only services. Can someone please confirm if this is correct and if it is can AWS please add this as a feature request?

已提問 5 個月前檢視次數 224 次
2 個答案
0

Hello.

As far as I can see from this document, it seems that there are Config rules for task definition, but there are no rules for starting or deleting tasks.
https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html

If AWS managed rules are not available, it may be a good idea to create custom rules yourself.
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

profile picture
專家
已回答 5 個月前
0

AWS::ECS::TaskDefinition is in fact a supported AWS Config Resource type: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#amazonelasticcontainerservice

However, AWS Config does not record when a task is launched, only when the task definition is created or updated. Since launching the task does not modify the task definition, config does not record it

AWS
已回答 5 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南