Securing non-Kubernetes workloads
In the previous section, we talked about Kubernetes workloads and how to secure managed Kubernetes services on top of AWS, Azure, and GCP. Kubernetes is not the only container orchestrator, and each of the hyperscale cloud providers offers other container orchestrators.
In the following section, we will discuss managed container orchestrators from AWS, Azure, and GCP.
Securing Amazon Elastic Container Service (ECS)
ECS is the Amazon-managed container orchestration service.
The main components of ECS are as follows:
- ECS cluster (also known as ECS capacity) – The main component for running and managing containers. It can be deployed on top of the following:
- Amazon EC2 instances – Customer needs to choose hardware resources (instance type) and take care of cluster size (number of running EC2 instances)
- Fargate – A fully serverless solution, where AWS takes care of the entire control plane maintenance (from provisioning...
