Re:AWS Fargate Deep Dive
by x3n0ph3n3 on Saturday September 14, 2019 @10:03PM
(#20975113)
You can roll out your own EC2 instances and Auto Scaling Group for ECS and control the security on them yourself.
[ Parent
| on HN ]
Re:AWS Fargate Deep Dive
by OhSoHumble on Saturday September 14, 2019 @10:08PM
(#20975129)
This is incredibly true. The only requirement for an ECS cluster member is to be running the ECS agent - which is a Golang binary.
You're free to run a CIS hardened image if you desire to do so.
This is how we roll. CIS as base, Packer to customize (ecs agent, docker) into own AMIs.
Are there OSS or commercial AMIs that have been hardened? Maybe some RHEL or CentOS?
Re:AWS Fargate Deep Dive
by OhSoHumble on Sunday September 15, 2019 @01:25AM
(#20975715)
Yeah, if you look at the AWS image marketplace then you'll find some.