For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-000-o57.md. A documentation index is available at /llms.txt.

ECS services should be associated with a load balancer

ecs

Description

ECS services should be associated with a load balancer to distribute traffic, perform health checks, and avoid exposing container instances directly. Daemon services are excluded since they run one task per instance and typically do not receive external traffic.

Remediation

Configure a load balancer for the ECS service by attaching an Application Load Balancer or Network Load Balancer target group. For guidance, refer to Service load balancing.