5 ms·
Don't know from a Fargate perspective but Elastic Container Service (ECS) deploys EC2 servers that do not pass the CIS Benchmark. I don't believe you gain much
by amsully 7y ago
Don't know from a Fargate perspective but Elastic Container Service (ECS) deploys EC2 servers that do not pass the CIS Benchmark. I don't believe you gain much from a security perspective.
- x3n0ph3n3 7y agoYou can roll out your own EC2 instances and Auto Scaling Group for ECS and control the security on them yourself.
- OhSoHumble 7y agoThis is incredibly true. The only requirement for an ECS cluster member is to be running the ECS agent - which is a Golang binary. You're free to run a CIS hardened image if you desire to do so.
- ed6612 7y agoThis is how we roll. CIS as base, Packer to customize (ecs agent, docker) into own AMIs.
- fovc 7y agoAre there OSS or commercial AMIs that have been hardened? Maybe some RHEL or CentOS?
- OhSoHumble 7y agoYeah, if you look at the AWS image marketplace then you'll find some.
- zo1 7y agoFor some odd reason, I find the AWS marketplace a bit suspect looking. Not saying that it is, just that that's my impression of it.