Evaluates whether the image used by each Elastic Compute Service (ECS) instance was created within the specified number of days. If so, the evaluation result is Compliant. The default value is 180 days.
Scenarios
Renew each subscription instance before it expires to ensure business continuity.
Risk level
Default risk level: medium.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
-
If the image of an ECS instance was created within the specified number of days, the evaluation result is Compliant. The default value is 180 days.
-
If the image of an ECS instance was created on or beyond the specified number of days ago, the evaluation result is Non-compliant.
Rule details
|
Item |
Description |
|
Rule name |
ecs-instance-image-expired-check |
|
Rule ID |
|
|
Tag |
Image |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
Every 24 hours |
|
Supported resource type |
ECS instance |
|
Input parameter |
days. Default value: 180. Unit: days. |