AWS > ECS >

ECS Service Public IP Disabled

HIGH
Source
CloudSploit
ID
ecs-service-public-ip-disabled

ECS Service Public IP Disabled

Ensure that Amazon ECS services have assignPublicIp set to disabled.

Enabling public IP assignment could expose container application servers to unintended or unauthorized access. Services should use private networking with NAT gateways or VPC endpoints for outbound internet access.

Modify ECS services to set assignPublicIp to disabled in the network configuration.