aws-ecs-task-executes-as-executionrole
The ECS agent for a task executes as the task execution role (executionRoleArn).
match (record)
{
"field": "executionRoleArn",
"resource_type": "AWS::ECS::TaskDefinition"
}
emit
| source type | Compute |
|---|---|
| source | <ECS task / task definition> |
| target | <task execution role (executionRoleArn)> |
Narrative
{task.name} agent executes as execution role {role.name} (executionRoleArn); pulls images/secrets/logs.
Raw rule rules/derived/aws/ecs.yaml
id: aws-ecs-task-executes-as-executionrole
emits: ExecutesAs
description: The ECS agent for a task executes as the task execution role (executionRoleArn).
match_record:
resource_type: AWS::ECS::TaskDefinition
field: executionRoleArn
emit:
source_type: Compute
source: <ECS task / task definition>
target: <task execution role (executionRoleArn)>
narrative: '{task.name} agent executes as execution role {role.name} (executionRoleArn); pulls images/secrets/logs.'