ecs-task-definition-pid-mode-check
Checks if ECSTaskDefinitions are configured to share a host’s process namespace with its Amazon Elastic Container Service (Amazon ECS) containers. The rule is NON_COMPLIANT if the pidMode parameter is set to ‘host’.
Note
This rule only evaluates the latest active revision of an Amazon ECS task definition.
Identifier: ECS_TASK_DEFINITION_PID_MODE_CHECK
Resource Types: AWS::ECS::TaskDefinition
Trigger type: Configuration changes
Amazon Web Services Region: All supported Amazon regions except US ISO West, US ISO East, Asia Pacific (Malaysia), US ISOB East, Amazon GovCloud (US-East), Amazon GovCloud (US-West), US West (Oregon), Canada West (Calgary) Region
Parameters:
- None
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.