Add ECS IAM permissions and fix architecture diagram - #95

Merged

strick-j merged 3 commits into

Feb 10, 2026

Annotations

10 errors and 1 warning

CKV_AWS_355: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_65: "Ensure container insights are enabled on ECS cluster"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_65: "Ensure container insights are enabled on ECS cluster"

CKV_AWS_51: "Ensure ECR Image Tags are immutable"

CKV_AWS_2: "Ensure ALB protocol is HTTPS"

CKV_AWS_150: "Ensure that Load Balancer has deletion protection enabled"

CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/