devxy/r-builds
Watch
2
0
Fork
You've already forked r-builds
 0
Code Issues 1 Pull requests Releases Activity

explicitly set privileged=False to attempt to quiet security hub finding ECS.1

Browse source
This commit is contained in:
Joshua C. Forest 2023-09-01 10:40:06 -04:00
commit dab250f9cb
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
serverless-resources.yml
View file

@ -147,6 +147,7 @@ rBuildsBatchJobDefinitionUbuntu2004:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2004"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -162,6 +163,7 @@ rBuildsBatchJobDefinitionUbuntu2204:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2204"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -177,6 +179,7 @@ rBuildsBatchJobDefinitionDebian10:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-10"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -192,6 +195,7 @@ rBuildsBatchJobDefinitionDebian11:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-11"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -207,6 +211,7 @@ rBuildsBatchJobDefinitionDebian12:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-12"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -222,6 +227,7 @@ rBuildsBatchJobDefinitionCentos7:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-7"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -237,6 +243,7 @@ rBuildsBatchJobDefinitionCentos8:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-8"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -252,6 +259,7 @@ rBuildsBatchJobDefinitionRhel9:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:rhel-9"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -267,6 +275,7 @@ rBuildsBatchJobDefinitionOpensuse154:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:opensuse-154"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -282,6 +291,7 @@ rBuildsBatchJobDefinitionFedora37:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-37"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200
@ -297,6 +307,7 @@ rBuildsBatchJobDefinitionFedora38:
JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-38"
Privileged: false
ReadOnlyRootFilesystem: true
Timeout:
AttemptDurationSeconds: 7200