AWS ECS cluster with container insights feature disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_65
Category - Subcategory	Monitoring - Performance Monitoring
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	577ef22c-f4c5-4a54-8aa0-cc6f58275777

Impact

Container Insights can be used to collect, aggregate, and summarize metrics and logs from containerized applications and microservices. They can also be extended to collect metrics at the cluster, task, and service levels. Using Container Insights allows you to monitor, troubleshoot, and set alarms for all your Amazon ECS resources. It provides a simple to use native and fully managed service for managing ECS issues. We recommend that for existing clusters you use the AWS CLI; and for new clusters, you use either the Amazon ECS console, or the AWS CLI.

How to Fix

Resource: AWS::ECS::Cluster

• Arguments: Properties.ClusterSettings [source,go]

---

Resources: ECSCluster: Type: 'AWS::ECS::Cluster' Properties: ...

• ClusterSettings:
• • Name: 'containerInsights'
• Value: 'enabled'

---