AWS ECS task definitions should have a logging configuration

문서 > Datadog 보안 > OOTB Rules > AWS ECS task definitions should have a logging configuration

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

This assessment examines whether the most recent active Amazon ECS task definition includes a specified logging configuration. The assessment will not pass if the task definition does not have the logConfiguration property defined or if the logDriver value is null in at least one container definition.

Logging plays a vital role in maintaining the reliability, availability, and performance of Amazon ECS. By collecting data from task definitions, you gain visibility that aids in debugging processes and identifying the source of errors. If you are using a logging solution that does not need to be explicitly defined in the ECS task definition (such as a third-party logging solution), you can safely disable this assessment after confirming that your logs are effectively captured and delivered.

Remediation

From the console

To define a log configuration for your Amazon ECS task definitions, see Specifying a log configuration in your task definition in the Amazon Elastic Container Service Developer Guide.