goss.yaml

file:
  /bin/aws:
    exists: true
    owner: root
    group: root
    linked-to: /usr/share/aws/bin/aws
    filetype: symlink
  /var/awslogs/bin/awslogs-agent-launcher.sh:
    exists: true
    mode: "0755"
    owner: root
    group: root
    filetype: file
  /conf:
    exists: true
    mode: "0700"
    owner: root
    group: root
    filetype: directory
  /conf/conf.yml:
    exists: true
    mode: "0644"
    owner: root
    group: root
    filetype: file
    contains:
    - /^DBPassword:/
    - /^DBHost:/
    - /^DBUser:/
  /etc/environment:
    exists: true
    filetype: file
    contains:
    - NO_PROXY=169.254.169.254
    - no_proxy=169.254.169.254
  /var/awslogs/etc/proxy.conf:
    exists: true
    filetype: file
    contains:
    - NO_PROXY=169.254.169.254
    - no_proxy=169.254.169.254
  /usr/lib/systemd/system/docker.service:
    exists: true
    filetype: file
    contains:
    - /^Environment=NO_PROXY=/
    - /^Environment=HTTP_PROXY=/
    - /^Environment=HTTPS_PROXY=/
  /etc/systemd/system/ecs-agent.service:
    exists: true
    mode: "0644"
    owner: root
    group: root
    filetype: file
  /etc/systemd/system/ecs-agent.timer:
    exists: true
    mode: "0644"
    owner: root
    group: root
    filetype: file
  /var/lib/ecs/data:
    exists: true
    mode: "0755"
    owner: root
    group: root
    filetype: directory
  /var/log/ecs:
    exists: true
    mode: "0755"
    owner: root
    group: root
    filetype: directory
  /var/log/awslogs-state.log:
    exists: true
    mode: "0644"
    owner: root
    group: root
    filetype: file
package:
  docker:
    installed: true
  unzip:
    installed: true
addr:
  tcp://localhost:8080:
    reachable: true
    timeout: 500
  tcp://localhost:8888:
    reachable: true
    timeout: 500
  tcp://localhost:443:
    reachable: true
    timeout: 500
port:
  tcp:22:
    listening: true
    ip:
    - 0.0.0.0
  tcp6:22:
    listening: true
    ip:
    - '::'
  tcp6:8080:
    listening: true
    ip:
    - '::'
  tcp6:8888:
    listening: true
    ip:
    - '::'
  tcp6:443:
    listening: true
    ip:
    - '::'
service:
  docker:
    enabled: true
    running: true
  ecs-agent:
    enabled: true
    running: true
  ecs-agent.timer:
    enabled: false
    running: true
  sshd:
    enabled: true
    running: true
  awslogs:
    enabled: true
    running: true
user:
  sshd:
    exists: true
    groups:
    - sshd
    shell: /sbin/nologin
group:
  sshd:
    exists: true
process:
  docker-current:
    running: true
  sshd:
    running: true