ECS task definition should configure log driver for audit containers

What it checks

ECS task definition: no log driver is configured for containers.

Where it applies

Terraform: aws_ecs_task_definition

CloudFormation: AWS::ECS::TaskDefinition

How to fix it

1. Add logConfiguration with logDriver = "awslogs" to each container definition. Create the matching CloudWatch log group with a retention policy.

Frameworks

• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules