Add ECS Security Analysis feature

[nzuresh]

🔒 ECS Security Analysis Feature

Overview

This PR introduces comprehensive security analysis capabilities for ECS clusters, providing vulnerability assessment, compliance checking, and security recommendations.

✨ Features Added

Core Security Analysis

• Cluster Security Assessment: Comprehensive analysis of ECS cluster configurations
• Compliance Frameworks: Support for AWS Foundational, PCI-DSS, HIPAA, SOC2
• Security Recommendations: Actionable remediation guidance with implementation steps
• Multi-format Reporting: Summary, detailed, JSON, and executive report formats

Security Coverage Areas

• 🌐 Network Security: VPC, security groups, load balancer configurations
• 🐳 Container Security: Runtime configurations, image security, privilege analysis
• 🔐 IAM Security: Task/execution roles, least privilege compliance
• 🔑 Secrets Management: Hardcoded secrets detection, AWS Secrets Manager integration
• 📊 Monitoring & Logging: Container Insights, CloudWatch logging, audit trails

📁 Files Added/Modified

Core Implementation

• awslabs/ecs_mcp_server/api/security_analysis.py - Security analysis API endpoints
• awslabs/ecs_mcp_server/modules/security_analysis.py - Security analysis logic
• awslabs/ecs_mcp_server/main.py - Module registration

Testing & Validation

• tests/unit/api/test_security_analysis_api.py - API unit tests
• tests/unit/modules/test_security_analysis_module.py - Module unit tests
• tests/integ/mcp-inspector/scenarios/03_security_analysis_tools/ - Integration tests
• tests/llm_testing/scenarios/07_security_analysis_scenario/ - LLM testing scenarios

Documentation & Tools

• SECURITY_ANALYSIS_CHECKS.md - Security checks documentation
• test_security_manual.py - Manual testing script
• pyproject.toml - Added pre-commit dependency

🚀 Usage Examples

# List available clusters
ecs_security_analysis_tool(action="list_clusters", parameters={"region": "us-east-1"})

# Comprehensive security analysis
ecs_security_analysis_tool(action="analyze_cluster_security", 
                          parameters={"cluster_name": "my-cluster"})

# Get high-priority recommendations
ecs_security_analysis_tool(action="get_security_recommendations",
                          parameters={"cluster_name": "my-cluster", 
                                    "severity_filter": "High", "limit": 5})

# Generate executive report
ecs_security_analysis_tool(action="generate_security_report",
                          parameters={"cluster_name": "my-cluster", 
                                    "format": "executive"})