Hi all - Probably a naive question, but can this field be set to

false

without any disruption to the entire infra? Unfortunately, our security scanners are flagging the fargate container and raising an alert indicating that fargate containers MUST NOT be publicly accessible.

if you deploy it in a private subnet in your VPC i think it should work

Yup both our subnets are private 🙂

cool then! its just there is a gotcha when you deploy to a public subnet and set it to false. You may have seen there is already a flag for metadata service for this, but then it turned out that public subnet but no public ip is not a good combo

Good to know. Thanks very much for sharing this Oleg!