Evaluates whether each ECS launch template version specifies a security group for the instance to join. If a security group is specified, the evaluation result is Compliant.
Scenarios
Specifying a security group in an ECS launch template helps enforce consistent network access control for instances launched from that template.
Risk level
Default risk level: medium.
You can change the risk level when you apply this rule.
Compliance evaluation logic
-
If an ECS launch template version specifies a security group, the evaluation result is Compliant.
-
If an ECS launch template version does not specify a security group, the evaluation result is Non-compliant.
Rule details
|
Parameter |
Description |
|
Rule name |
ecs-launch-template-version-attach-security-group |
|
Rule identifier |
|
|
Tag |
LaunchTemplateVersion |
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration change |
|
Supported resource type |
ECS instance launch template |
|
Input parameter |
None |