From the course: Hands-On Development in AWS

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Using ECS best practices

Using ECS best practices

- We do have some recommended best practices for ECS. Make your container images static and keep them as small as possible. It is recommended to have one application process per image. Log your output to standard error and standard output so that we can see that stuff in CloudWatch logs. And it is recommended to have a dedicated IAM role per task definition. So that you can follow that principle of least privilege. Allow internet access in and out only if you need to. If you don't need access to the internet, don't allow it. It is unsafe. Monitor your containers which CloudWatch Container Insights, we have X-Ray available as well as VPC Flow Logs. This will allow us to see data going into and out of our containers to insure security. The Shared Responsibility Model remember that this is security of the Cloud versus security in the Cloud. It is your responsibility for security in the Cloud, whatever you deploy in AWS is your responsibility to ensure its security. Use the Amazon Key…

Contents