AWS has a few other ECS Cluster settings that are able to be configured at a cluster level. At this time, it seems that only container Insights is able to be configured using the setting block in the aws_ecs_cluster resource. I am requesting the fargate FIPS Mode(This is supported in govcloud) be added if able. According to this document it looks like it may be possible to add a few other settings as well, such as guard duty integration and task retirement wait time. Here is the doc https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting
Affected Resource(s) and/or Data Source(s)
aws_ecs_cluster
Potential Terraform Configuration
resource "aws_ecs_cluster" "new_ecs_cluster" {
## Omitted other arguments for brevity
setting {
name = "fargateFIPSMode"
value = "enabled"
}
setting {
name = "fargateTaskRetirementWaitPeriod"
value = 14
}
setting {
name = "guardDutyActivate"
value = on
}
}
Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
Volunteering to Work on This Issue
If you are interested in working on this issue, please leave a comment.
If this would be your first contribution, please review the contribution guide.
Description
AWS has a few other ECS Cluster settings that are able to be configured at a cluster level. At this time, it seems that only container Insights is able to be configured using the setting block in the aws_ecs_cluster resource. I am requesting the fargate FIPS Mode(This is supported in govcloud) be added if able. According to this document it looks like it may be possible to add a few other settings as well, such as guard duty integration and task retirement wait time. Here is the doc https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting
Affected Resource(s) and/or Data Source(s)
aws_ecs_cluster
Potential Terraform Configuration
References
Whole Document
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting
FIPS Section for fargate
AWS Fargate Federal Information Processing Standard (FIPS-140) compliance
Task retirement section
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fargate-retirement-wait-time
Guard duty section
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#guard-duty-integration
Would you like to implement a fix?
None