Associated resources are compliant if they inherit specified tags from the ECS instance.
Scenarios
Cloud IT management requires resources to carry tags for permission isolation, bill allocation, and automated O&M.
Threat level
Default threat level: Medium.
You can change the threat level as needed.
Detection logic
-
Compliant: the associated resource inherits the specified tags from the ECS instance.
Example: an ECS instance has the
env:prodtag and its associated disk also hasenv:prod— the disk is compliant. -
Non-compliant: the associated resource does not inherit the specified tags from the ECS instance.
Rule details
|
Parameter |
Description |
|
Rule name |
Resource evaluation for tags inherited from an ECS instance |
|
Rule identifier |
resources-inherit-tags-from-ecs-instance |
|
Tags |
ECS, Tag |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Scheduled execution |
|
Trigger frequency |
24 hours |
|
Supported resource types |
|
|
Input parameters |
|