skills.rest
aurainfosec
aurainfosecOFFICIAL
Explore all skills by this author →
WebsiteGitHub

ecs

Validate AWS ECS container security and internet exposure using API and network checks.

Updated Feb 16, 2026
Search Tags:#aws#security audit#ecs#nmap#privileged containers#internet exposure#task roles
One-click install
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill ecs-aurainfosec
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ecs
Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/ecs
Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill ecs-aurainfosec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you investigate AWS ECS configurations to validate common security controls and determine whether running tasks are reachable from the internet, reducing the risk of misconfigurations going unnoticed.

Core Features & Use Cases

  • Task and service configuration guidance: Provides actionable AWS ECS CLI patterns for clusters, task definitions, services, and troubleshooting typical operational issues.
  • ECS-specific security checks: Validates privileged containers, checks for secrets in environment variables, reviews task/execution role posture, and detects public IP exposure for running tasks.
  • External accessibility probing: Discovers ECS tasks with public IPs and performs port scans and TLS checks to confirm reachable surfaces.

Quick Start

Use the ecs skill to determine whether any running ECS tasks have public IPs and exposed ports that should be internal.

Frequently Asked Questions about ecs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if my AWS ECS tasks are exposed to the internet?▼

To check AWS ECS task internet exposure, the Skill queries ECS APIs to identify running tasks with public IPs, then uses nmap and testssl to probe reachable ports and confirm external accessibility.

How do I detect privileged containers in AWS ECS task definitions?▼

Detect privileged containers in AWS ECS by inspecting task definitions via AWS CLI. The Skill validates task definition configurations to identify containers running with elevated privileges.

Can I audit ECS task roles and execution roles for security misconfigurations?▼

Yes, you can audit ECS task roles and execution roles. The Skill performs IAM inspection queries to review the security posture of roles associated with your ECS tasks and services.

How do I find secrets exposed in ECS environment variables?▼

Find secrets in ECS environment variables by reviewing task definitions. The Skill checks task definition configurations to detect sensitive data improperly stored in environment variables.

What AWS CLI commands are needed to troubleshoot ECS service configurations?▼

Troubleshooting ECS service configurations requires AWS CLI commands for clusters, task definitions, and services. The Skill provides actionable CLI patterns to validate these configurations and identify operational issues.

Does this approach work for auditing both ECS clusters and running tasks?▼

Yes, this approach works for auditing ECS clusters and running tasks. The Skill applies security and network reachability checks to clusters, task definitions, services, and actively running tasks.

Related Skills

Explore More Legal & Compliance Skills→
jayjpatel9717jayjpatel9717

Cloud Security Verification

Verify AWS security configurations using AWS CLI commands and network probes.

Community
Intermediate
abzhawabzhaw

docker-security

Audit Docker containers for security misconfigurations, exposed ports, and resource abuse.

Community
Advanced
arbazkhan971arbazkhan971
26

network

Automate DNS, SSL/TLS, CDN, and load balancer configuration and health validation.

Community
Intermediate
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced