Amazon Elastic Container Service (Amazon ECS) now supports AWS CloudTrail data events, providing detailed visibility into Amazon ECS Agent API activities. This new capability enables customers to monitor, audit, and troubleshoot container instance operations.
With CloudTrail data event support, security and operations teams can now maintain comprehensive audit trails of ECS Agent API activities, detect unusual access patterns, and troubleshoot agent communication issues more effectively. Customers can opt in to receive detailed logging through the new data event resource type AWS::ECS::ContainerInstance for ECS agent activities, including when the ECS agent polls for work (ecs:Poll), starts telemetry sessions (ecs:StartTelemetrySession), and submits ECS Managed Instances logs (ecs:PutSystemLogEvents). This enhanced visibility enables teams to better understand how container instance roles are utilized, meet compliance requirements for API activity monitoring, and quickly diagnose operational issues related to agent communications.
This new feature is available for Amazon ECS on EC2 in all AWS Regions and ECS Managed Instances in select regions. Standard CloudTrail data event charges apply. To learn more, visit the Developer Guide.
Categories: marketing:marchitecture/containers,general:products/amazon-ec2,general:products/aws-govcloud-us,general:products/amazon-ecs
Source: Amazon Web Services
Latest Posts
- AI Gateway, Access – Identity-aware controls are now available in AI Gateway
- [Preview Announcement] Re-introducing Forward Proxy as AWS Network Firewall Functionality
- MC1447683: Microsoft 365 Copilot Scheduled Prompts Moves to Microsoft 365 Connected Experiences Governance
- MC1447678: Exchange Online Adds EWSAllowedAppIDs to Manage Access Before EWS Retirement
