diff --git a/serverless-resources.yml b/serverless-resources.yml
index 00e3456..20ab48b 100644
--- a/serverless-resources.yml
+++ b/serverless-resources.yml
@@ -172,6 +172,7 @@ pythonBuildsBatchJobDefinitionUbuntu1804:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:ubuntu-1804"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionUbuntu2004:
@@ -186,6 +187,7 @@ pythonBuildsBatchJobDefinitionUbuntu2004:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:ubuntu-2004"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionUbuntu2204:
@@ -200,6 +202,7 @@ pythonBuildsBatchJobDefinitionUbuntu2204:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:ubuntu-2204"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionDebian10:
@@ -214,6 +217,7 @@ pythonBuildsBatchJobDefinitionDebian10:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:debian-10"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionDebian11:
@@ -228,6 +232,7 @@ pythonBuildsBatchJobDefinitionDebian11:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:debian-11"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionCentos7:
@@ -242,6 +247,7 @@ pythonBuildsBatchJobDefinitionCentos7:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:centos-7"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionCentos8:
@@ -256,6 +262,7 @@ pythonBuildsBatchJobDefinitionCentos8:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:centos-8"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionRhel9:
@@ -270,6 +277,7 @@ pythonBuildsBatchJobDefinitionRhel9:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:rhel-9"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionOpensuse153:
@@ -284,6 +292,7 @@ pythonBuildsBatchJobDefinitionOpensuse153:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:opensuse-153"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200
 pythonBuildsBatchJobDefinitionOpensuse154:
@@ -298,6 +307,7 @@ pythonBuildsBatchJobDefinitionOpensuse154:
       JobRoleArn:
         "Fn::GetAtt": [ pythonBuildsEcsTaskIamRole, Arn ]
       Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/python-builds:opensuse-154"
+      ReadonlyRootFilesystem: true
     Timeout:
       AttemptDurationSeconds: 7200