ECS Cluster with Container Insights Disabled

• Query id: 97cb0688-369a-4d26-b1f7-86c4c91231bc
• Query name: ECS Cluster with Container Insights Disabled
• Platform: Terraform
• Severity: Low
• Category: Observability
• CWE: 778
• URL: Github

Description

ECS Cluster should enable container insights
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - tf file

resource "aws_ecs_cluster" "foo" {
  name = "white-hart"

#  setting {
#    name  = "containerInsights"
#    value = "enabled"
#  }
}

Code samples without security vulnerabilities

Negative test num. 1 - tf file

resource "aws_ecs_cluster" "foo" {
  name = "white-hart"

  setting {
    name  = "containerInsights"
    value = "enabled"
  }
}