From 04bcbcdb4414e074dc565f6c4e68b6f0db546bfc Mon Sep 17 00:00:00 2001
From: Darin Smith <3194385+dacelbot@users.noreply.github.com>
Date: Wed, 8 Jun 2022 06:58:19 -0700
Subject: [PATCH] Minor change, filter param should not be a list

---
 rules/cloud/aws/aws_ecs_task_definition_backdoor.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/rules/cloud/aws/aws_ecs_task_definition_backdoor.yml b/rules/cloud/aws/aws_ecs_task_definition_backdoor.yml
index ad8b7b889..3ea0f87d0 100644
--- a/rules/cloud/aws/aws_ecs_task_definition_backdoor.yml
+++ b/rules/cloud/aws/aws_ecs_task_definition_backdoor.yml
@@ -19,9 +19,9 @@ detection:
             - RegisterTaskDefinition
             - RunTask
     filter:
-      - requestParameters.containerDefinitions.command|contains|all:
-          - '169.254'
-          - '$AWS_CONTAINER_CREDENTIALS'
+      requestParameters.containerDefinitions.command|contains|all:
+        - '169.254'
+        - '$AWS_CONTAINER_CREDENTIALS'
     condition: selection_source and filter
 level: medium
 tags: