AWS GovCloud支持ECS Fargate任务开启FIPS模式。以下是一个示例Fargate任务定义，其中FIPS模式已启用：

{
  "requiresCompatibilities": [
    "FARGATE"
  ],
  "taskRoleArn": "arn:aws:iam::123456789012:role/ecsTaskExecutionRole",
  "containerDefinitions": [
    {
      "name": "myContainer",
      "image": "myImage",
      "cpu": 256,
      "memory": 512,
      "essential": true,
      "linuxParameters": {
        "initProcessEnabled": true,
        "sharedMemorySize": 1024
      },
      "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-group": "/ecs/myGroup",
          "awslogs-region": "us-west-2",
          "awslogs-stream-prefix": "ecs"
        }
      },
      "environment": [
        {
          "name": "FIPS_MODE",
          "value": "true"
        }
      ]
    }
  ],
  "networkMode": "awsvpc",
  "executionRoleArn": "arn:aws:iam::123456789012:role/ecsTaskExecutionRole",
  "memory": "512",
  "cpu": "256",
  "family": "myTaskDefinitionFamily",
  "requiresCompatibilities": [
    "FARGATE"
  ],
  "networkConfiguration": {
    "awsvpcConfiguration": {
      "subnets": [
        "subnet-12345678",
        "subnet-01234567"
      ],
      "securityGroups": [
        "sg-12345678"
      ]
    }
  }
}

在环境变量中设置FIPS_MODE为true以启用FIPS模式。这个值将在容器启动时传递给应用程序。要检查FIPS模式是否处于启用状态，可以像这样查询/proc/sys/crypto/fips_enabled文件：

$ cat /proc/sys/crypto/fips_enabled
1

如果返回1，则FIPS模式