ECS task definition should not run containers in privileged mode

What it checks

ECS task definition: at least one container runs in privileged mode.

Where it applies

Terraform: aws_ecs_task_definition

CloudFormation: AWS::ECS::TaskDefinition

How to fix it

1. Remove privileged = true from all container definitions. If specific Linux capabilities are needed, add them explicitly via linuxParameters.capabilities.add and drop all others.

Frameworks

• AWS FSBP ECS.4
• SOC 2 CC6.1
• NIST 800-53 rev5 AC-3

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules