Ensure that Amazon ECS services have assignPublicIp set to disabled.
Enabling public IP assignment could expose container application servers to unintended or unauthorized access. Services should use private networking with NAT gateways or VPC endpoints for outbound internet access.
Modify ECS services to set assignPublicIp to disabled in the network configuration.