amazon-genomics-cli
amazon-genomics-cli copied to clipboard
Ensure Fargate services always run the latest Fargate Platform Version
Description
At creation all ECS fargate services (e.g. Cromwell Engine and Toil Engine?) should use Fargate latest platform
Use Case
Rule: securityhub-ecs-fargate-latest-platform-version-11f90e85 Summary of Rule: This control checks if ECS Fargate Services is running on the latest Fargate platform version. This control fails if “PlatformVersion” is not set to “LATEST”
Proposed Solution
Examine CDK code and ensure we are not pinned to a specific version. See if it is possible to pin to "Latest"