ECS cluster must have Container Insights enabled

Medium AWS General aws-ecs-cluster-ecs-cluster-container-insights

Applies to

AWS::ECS::Cluster

What CGPulse checks

A resource passes this rule when settings.containerInsights must equal enabled. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Enable Container Insights to collect metrics and logs for monitoring. In AWS Console: ECS > Clusters > select cluster > Update > enable Container Insights. See: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html

CLI

aws ecs update-cluster-settings --cluster "{id}" --settings name=containerInsights,value=enabled

Terraform

resource "aws_ecs_cluster" "{name}" {
  setting {
    name  = "containerInsights"
    value = "enabled"
  }
}

Compliance frameworks

Cloud Security: AWS Foundations

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan