An ECS instance is considered compliant if its OS image is one of the images that you specify.
Scenarios
This rule helps you ensure that all ECS instances use a standard OS image required by your organization.
Risk level
Default risk level: Medium.
You can change the risk level as needed.
Detection logic
OS images for an ECS instance are compliant if they meet the parameters that you set.
Non-compliant: The OS image of an ECS instance is not on the list of specified image IDs.
Rule details
Parameter | Description |
Rule name | ECS instances use specified images |
Rule identifier | ecs-instance-imageId-check |
Tags | ECS, Instance, Image |
Automatic remediation | Not supported |
Rule trigger | Configuration change |
Supported resource types | ECS instance |
Rule input parameters |
Note Use a comma (,) to separate specifications. |
Remediation
You can change the OS image of the ECS instance. For more information, see Change the operating system (replace the system disk).