ECS task definition should specify a task role for fine-grained IAM access

What it checks

ECS task definition should specify a task role for fine-grained IAM access

Where it applies

Terraform: aws_ecs_task_definition

CloudFormation: AWS::ECS::TaskDefinition

How to fix it

1. Create a task-specific IAM role with the minimum permissions the task needs. Set task_role_arn to isolate permissions per task.

Frameworks

• SOC 2 CC6.1

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules