steampipe plugin install awssteampipe plugin install aws

Table: aws_ecs_task_definition

A task definition is required to run Docker containers in Amazon ECS.

Examples

Basic info

select
  task_definition_arn,
  cpu,
  network_mode,
  title,
  status,
  tags
from
  aws_ecs_task_definition;

Count the number of containers attached to each task definitions

select
  task_definition_arn,
  jsonb_array_length(container_definitions) as num_of_conatiners
from
  aws_ecs_task_definition;

List containers with elevated privileges on the host container instance

select
  task_definition_arn,
  cd ->> 'Privileged' as privileged,
  cd ->> 'Name' as container_name
from
  aws_ecs_task_definition,
  jsonb_array_elements(container_definitions) as cd
where
  cd ->> 'Privileged' = 'true';

List task definitions with containers where logging is disabled

select
  task_definition_arn,
  cd ->> 'Name' as container_name,
  cd ->> 'LogConfiguration' as log_configuration
from
  aws_ecs_task_definition,
  jsonb_array_elements(container_definitions) as cd
where
  cd ->> 'LogConfiguration' is null;

Query examples

Control examples

.inspect aws_ecs_task_definition

AWS ECS Task Definition

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
compatibilities	jsonb	The launch type to use with your task.
container_definitions	jsonb	A list of container definitions in JSON format that describe the different containers that make up your task.
cpu	bigint	The number of cpu units used by the task.
execution_role_arn	text	The Amazon Resource Name (ARN) of the task execution role that grants the Amazon ECS container agent permission to make AWS API calls on your behalf.
family	text	The name of a family that this task definition is registered to.
inference_accelerators	jsonb	The Elastic Inference accelerator associated with the task.
ipc_mode	text	The IPC resource namespace to use for the containers in the task.
memory	bigint	The amount (in MiB) of memory used by the task.
network_mode	text	The Docker networking mode to use for the containers in the task.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
pid_mode	text	The process namespace to use for the containers in the task.
placement_constraints	jsonb	An array of placement constraint objects to use for tasks.
proxy_configuration	jsonb	The configuration details for the App Mesh proxy.
region	text	The AWS Region in which the resource is located.
registered_at	text	The Unix timestamp for when the task definition was registered.
registered_by	text	The principal that registered the task definition.
requires_attributes	jsonb	The container instance attributes required by your task.
requires_compatibilities	jsonb	The launch type the task requires. If no value is specified, it will default to EC2. Valid values include EC2 and FARGATE.
revision	bigint	The revision of the task in a particular family.
status	text	The status of the task definition.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with task.
task_definition_arn	text	The Amazon Resource Name (ARN) that identifies the task definition.
task_role_arn	text	The short name or full Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that grants containers in the task permission to call AWS APIs on your behalf.
title	text	Title of the resource.
volumes	jsonb	The list of volume definitions for the task.

turbot/aws

Table: aws_ecs_task_definition

Examples

Basic info

Count the number of containers attached to each task definitions

List containers with elevated privileges on the host container instance

List task definitions with containers where logging is disabled

Query examples

Control examples

.inspect aws_ecs_task_definition

Steampipe

Resources

Community