SVS342: Securing Amazon ECS Workloads with AWS Signer and Amazon GuardDuty

Resources for SVS342: Securing Amazon ECS workloads with AWS Signer and Amazon GuardDuty

In this session, explore the essential steps for implementing robust security measures for workloads on Amazon ECS, including best practices for host, network, and runtime security. Delve into the process of verifying and signing container images using AWS Signer to mitigate the risks of running untrusted or vulnerable software. Examine the power of Amazon GuardDuty and Amazon Inspector to detect potential threats and assess applications for vulnerabilities within your Amazon ECS environments.

Amazon ECS best practices

AWS Documentation

How Runtime Monitoring works with Fargate (Amazon ECS only)

AWS Documentation

Detect runtime security threats in Amazon ECS and AWS Fargate, new in Amazon GuardDuty

AWS Blog

Enhancing Software Supply Chain Security

Workshop

AWS Well-Architected Amazon ECS Lens

AWS Samples

Amazon ECS: Well Architected Amazon ECS lens Overview | Amazon Web Services

Links from talk

Amazon GuardDuty ECS Runtime Monitoring Overview | Amazon Web Services

Links from talk

Presented by:

Mai Nishitani

Mai Nishitani

Mai enjoys helping organisations leverage AWS services effectively. She is a speaker at various AWS events and initiatives, including as AWS ANZ Summit and AWS Innovate, where she shares her expertise on topics including generative AI, Containers and serverless solutions. Mai’s passion is around designing scalable, secure, and efficient cloud architectures for AWS customers.

Follow on LinkedIn

Sai Kumar Samala

Sai Kumar Samala

Sai Kumar Samala is a Solutions Architect at Amazon Web Services, specializing in container technologies. He brings expertise in designing container-based solutions with deep knowledge of Kubernetes and Docker platforms. As an active speaker, he presents at AWS Summits, sharing insights on cloud computing and containerization. He is passionate about helping organizations optimize their technological infrastructure through advanced containerization strategies.

Follow on LinkedIn