Skip to main content

💼 [ECS.16] ECS task sets should not automatically assign public IP addresses

  • ID: /frameworks/aws-fsbp-v1.0.0/ecs/16

Description​

A public IP address is reachable from the internet. If you configure your task set with a public IP address, the resources associated with the task set can be reached from the internet. ECS task sets shouldn't be publicly accessible, as this may allow unintended access to your container application servers.

Similar​

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 PCI DSS v4.0.1 → 💼 1.4.4 System components that store cardholder data are not directly accessible from untrusted networks.6no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance