Hi everyone, question on using the aws batch that is created via metaflow. We have recently introduced additional security measures in aws security hub, where the ecs task definitions (container) should be limited to read-only-system access and disable privileged mode. Currently we use

--with batch

option to deploy the flows, wondering if there are any options to set for the mentioned security measures.

@shy-football-16967 - if you can help us with the exact violations, we can quickly check if we can ship updates to the job definitions

@square-wire-39606 Thank you, there are 2: • ECS.1 Amazon ECS task definitions should have secure networking modes and user definitions. • ECS.5 ECS containers should be limited to read-only access to root filesystems

thanks! we will take a look and get back to you. cc @bulky-afternoon-92433