amazon-ecs-exec-checker
amazon-ecs-exec-checker copied to clipboard
aws-containers
🚀 Pre-flight checks for ECS Exec
Hi there, I'm trying to run `execute-command` to open an interactive shell against my ECS Fargate task. I'm using this checker to validate my configuration: ``` $ bash
When running the script against a Windows Fargate task, I see: `Platform Version | 1.0.0 (Required: >= 1.4.0)` This is incorrect for Windows containers [per the documentation](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html): "If you're using...
The following error occurred when running ECS Exec Checker on Mac. ``` Could not connect to the endpoint URL: "https://sts.ap-notheast-1.amazonaws.com/" ``` Verified that the region setting for profile is correct....
At this moment the script only warns about the `ssmmessages` VPC endpoint [here](https://github.com/aws-containers/amazon-ecs-exec-checker/blob/v0.7/check-ecs-exec.sh#L617), but for some cases ECS Exec requires additional VPC endpoints such as KMS depending on ECS cluster...
There are probably lots of other keys that this applies to, but this key in particular is probably very common in Permissions Boundaries, and unlike lots of other keys, we...
In lieu of https://github.com/aws/containers-roadmap/issues/1829, it would be helpful if there was a specific check for the [`userns-remap` docker daemon config option](https://docs.docker.com/engine/security/userns-remap/#enable-userns-remap-on-the-daemon) since ECS Exec is not compatible with user namespace...
Issue ?
``` ubuntu@DESKTOP-I7DBFAI:~$ aws ecs describe-tasks --profile=dma --region=eu-west-1 --cluster=mps-corporate-web --tasks=2fb8c764dcaf4b819f51d2c2b6fbcf70 { "tasks": [ { "attachments": [ { "id": "af9341d2-fa6c-4af2-9964-1e40007caeed", "type": "ElasticNetworkInterface", "status": "ATTACHED", "details": [ { "name": "subnetId", "value": "subnet-0a7ce6575e6d811ff" },...
When running the checker, I get the following jq error: ``` ------------------------------------------------------------- Prerequisites for check-ecs-exec.sh v0.7 ------------------------------------------------------------- jq | OK (/opt/homebrew/bin/jq) AWS CLI | OK (/opt/homebrew/bin/aws) ------------------------------------------------------------- Prerequisites for the...
If a container fails to launch the `managedAgents` key will not be present , this changes filters those container by selecting only the ones that do have the key By...
We ran the script and everything came out green or yellow. (SSM PrivateLink was yellow). When we run the `aws ecs execute-command` we get an error message ``` SessionId: xxx:...
