Skip to main content

🔌 AWS ECS Container Definition - object.extracts.yaml

  • Contextual name: 🔌 object.extracts.yaml
  • ID: /types/CA10__CaAwsEcsContainerDefinition__c/object.extracts.yaml

Used In

LogicPolicyFlags
🧠 prod.logic.yaml🟢🛡️ AWS ECS Task Definition logging is not configured🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ AWS ECS Task Definition passes secrets as container environment variables🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ AWS ECS Task Definition runs as privileged🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ AWS ECS Task Definition Readonly Root Filesystem is disabled🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ AWS ECS Task Definition with Host Network Mode runs containers as root🟢🟢 x3

Content

Open File

---
extracts:
# Checkbox
- name: "CA10__privileged__c"
value:
FIELD:
path: "CA10__privileged__c"
# Nullable.
- name: "CA10__user__c"
value:
FIELD:
path: "CA10__user__c"
# Checkbox
- name: "CA10__readonlyRootFilesystem__c"
value:
FIELD:
path: "CA10__readonlyRootFilesystem__c"
- name: "CA10__environment__c"
value:
FIELD:
returnType: "BYTES"
path: "CA10__environment__c"
# Values: json-file | syslog | journald | gelf | fluentd | awslogs | splunk | awsfirelens
# Nullable.
- name: "CA10__logConfigurationDriver__c"
value:
FIELD:
path: "CA10__logConfigurationDriver__c"