AWS Security Hub detected a security risk related to ECS task definitions: storing database passwords in plaintext in the task definition environment variables.
The issue was addressed by transitioning to AWS Secrets Manager to securely manage database passwords.
The solution eliminates the risk of storing plaintext secrets and aligns with AWS's best practices for managing sensitive information.
Using Secrets Manager improves security, maintainability, and allows for dynamic retrieval of passwords in ECS task definitions.