Description
Container Insights provides detailed CloudWatch information about resource use and operation of ECS clusters and services. Disabling it can leave information gaps that delay incident diagnosis and response.
Distinguish this setting from basic ECS metrics or other monitoring. If the cluster setting is omitted, check the account default and effective state.
Potential impact
- Performance degradation or abnormal conditions can be noticed late.
- Identifying an incident’s cause and impact can take longer.
Remediation
Specify name: containerInsights and value: enabled in the ECS cluster’s settings. Consider enhanced if you need more detail and your provider supports it. Review collection costs and permissions, then verify CloudWatch metrics, dashboards and alarms after deployment.
Examples
Before
name: aws-eks
runtime: yaml
resources:
foo:
type: aws:ecs:Cluster
properties:
settings:
- name: containerInsights
value: disabled
This explicitly disables containerInsights.
After
name: aws-eks
runtime: yaml
resources:
foo:
type: aws:ecs:Cluster
properties:
settings:
- name: containerInsights
value: enabled
This enables Container Insights on the same cluster. Verify that metrics are collected normally and the required alarms are configured.