[ECS] [request]: Delete task definitions

[lawrencepit]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request
Currently it is possible to deregister a task definition, after which its status becomes INACTIVE. However the task definition is still discoverable indefinitely. Old task definitions (in our case they are many years old) may contain sensitive information (added before the time SSM and Secrets Manager were available).

Which service(s) is this request for?
ECS

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?
We wish to permanently delete old task definitions that may contain sensitive information.

Are you currently working around this issue?
Impossible.

We moved a lot of sensitive data from plain text environment variables to SSM Parameter Store. But in old revisions the variables still available to read in plaintext even if the revision was deactivated. Our development team has access to ECS Task Definitions but do not have access to SSM Parameter Store and to KMS keys. So, the issue has potential security risks for us.

[lucazin]

Im facing this issue right now..

[007vasy]

same here

[black13spell]

Frustrating!! Please consider it.

[carellen]

Six years should be enough to implement 'delete' function, am I wrong?

[simbrams]

Still waiting for this feature.

[colinbut]

Please consider this feature request. It would be more than valuable to have this feature.