Checks whether the network type of an ECS launch template version matches the specified value. The default value is VPC. If no network type is specified, the rule is not applicable.
Threat level
Default threat level: Low.
You can change the threat level based on your requirements.
Detection logic
-
An ECS launch template version is considered compliant if its network type matches the specified value. The default value is VPC. If no network type is specified, the rule is not applicable.
Rule details
|
Parameter |
Description |
|
Rule name |
ECS launch templates should not have public network access |
|
Rule identifier |
|
|
Tag |
Image |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Configuration change |
|
Supported resource types |
ACS::ECS::LaunchTemplateVersion |
|
Input parameters |
networkType (Default value: vpc) |
该文章对您有帮助吗？