💼 [ECS.21] ECS Task Definitions should configure non-administrator users in Windows container definitions

• ID: /frameworks/aws-fsbp-v1.0.0/ecs/21

Description

When Windows containers run with administrator privileges, they pose several significant security risks. Administrators have unrestricted access within the container. This elevated access increases the risk of container escape attacks, where an attacker could potentially break out of container isolation and access the underlying host system.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/ecs-controls.html#ecs-21

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance