All checks
Medium
GuardDuty ECS Runtime Monitoring should be enabled
Verifies that the GuardDuty automated security agent is enabled for runtime monitoring of ECS clusters on AWS Fargate in all accounts.
- service
- GuardDuty
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To enable GuardDuty ECS Runtime Monitoring, you need to configure the ECS Runtime Monitoring settings in GuardDuty.
- Navigate to the Amazon GuardDuty console
- Go to 'Settings' in the left navigation
- Select 'Runtime Monitoring'
- Enable 'ECS Runtime Monitoring' for Fargate
- Configure security agents for ECS clusters
- Set up monitoring for ECS tasks on Fargate
- Save the configuration
- Verify that ECS Runtime Monitoring is active
See which of your accounts this check is failing on.
Book a demo