Container Security

Posts on Docker, Containers, and Container Security by Teri Radichel

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: Appsec | Secure Code | Multicloud Security

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Container basics — what are they and why would you want to use them?

Containers 101 and Why Use Them?

ACM.277 The basics of containers like Docker containers

medium.com

Container Runtime Security — tracking actions related to containers at the operating system level.

When Your Machine Lies To You

A word of caution about container runtime security solutions

medium.com

How might containers be compromised?

Threat Modeling for Containers

ACM.7 Security considerations for containers used by batch jobs

medium.com

Installing Git in a Container

ACM.278 Installing software in a container

medium.com

How to Tell if You’re Inside a Container

ACM.279 Commands you can execute to try to figure out if your commands are executing inside a container

medium.com

Cloning git Repositories in a Container

ACM.280 Executing commands when building an image versus when you run a container based on the image

medium.com

Container Engines and Runtimes

ACM.278 Sorting all all the runtimes and why they exist

medium.com

Leveraging Containers in Lambda for Governance, Secure Configurations, and Portability

ACM.288 Containers everywhere for consistency and compliance

medium.com

Deploy an AWS Elastic Container Registry Repository with CloudFormation

ACM.282 Creating an ECR Repository to deploy containers in Lambda functions

medium.com

Pushing a Container to the AWS Elastic Container Registry

ACM.287 A few simple commands to get our Docker container into ECR

medium.com

Inconsistencies and Risks That Make AWS KMS Key Deployments Complicated

ACM.286 Troubleshooting a KMS Key Policy used for AWS ECR

medium.com

Allow Lambda to Pull Containers from Elastic Container Registry

ACM.295 Add a policy to ECR to allow lambda to access images

medium.com

Deploying a Lambda running a Container using CloudFormation

ACM.298 Leveraging ECR and our prior VPC with NAT deployment

medium.com

Testing a Lambda function with the AWS Console and Enabling CloudWatch Logs and Metrics

ACM.299 Restricting Lambda functions to write to their own CloudWatch logs groups

medium.com

Lambda Architecture vs. Container Architecture

ACM.300 Resolving errors caused by architecture mismatch

medium.com

Fixing Application Errors Inside a Container Used By a Lambda Function and Redeploying It

ACM.301 The benefits and risks of redeploying a container used by a Lambda function

medium.com

Testing Lambda Functions Locally Outside of Lambda

ACM.302 Using the AWS Lambda Runtime Interface Emulator (RIE) and how system architectures affect it

medium.com

Why Do I Need a Language Specific Runtime in a Lambda Container?

ACM.303 Why doesn’t Lambda just run any OCI Compliant container?

medium.com

Custom Lambda Runtimes

ACM.304 Overview of a custom Lambda runtime to execute bash scripts deployed in a container in Lambda

medium.com

Custom Bash Runtime for Lambda Container

ACM.305 Using AWS base images for a container that runs a custom Lambda runtime

medium.com

Adding Error Handling to Bash Custom Lambda Runtime

ACM.306 Using Bash trap to capture and handle errors in bash scripts

medium.com

Using the Lambda Runtime Interface Emulator With a Custom Bash Runtime

ACM.307 Revisiting the RIE with a revamped Arm container for Lambda

medium.com

A Bash Error Handler For a Bash Custom Lambda Runtime

ACM.319 Handling multiple errors and different types of errors in different functions

medium.com

Where Are Your Yum Packages Coming From?

ACM.321 This issue could be applicable to any cloud provider — check where your packages originate on the network

medium.com

Moving A Lambda Function to AWS Batch

ACM.328 Considering new risks in a different execution environment with different security configuration options

medium.com

Building a Container for AWS Batch vs. AWS Lambda

ACM.328 Also trying to figure out which IP ranges are required for trusted downloads

medium.com

More on using containers with Lambda here:

AWS Lambda Security

Posts on Lambda Security by Teri Radichel

medium.com

Examples of container vulnerabilities

Container Escape Vulnerability in AWS Hot Patch

Update or mitigate now if you are affected (if you run containers, you probably are.)

medium.com

Related stories on application security:

Application Security

Compilation of stories on Application Security (AppSec) and Secure Code by Teri Radichel

medium.com

Follow for updates.

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab

Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation

Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab

Summarize

Container Security

Posts on Docker, Containers, and Container Security by Teri Radichel

Containers 101 and Why Use Them?

ACM.277 The basics of containers like Docker containers

When Your Machine Lies To You

A word of caution about container runtime security solutions

Threat Modeling for Containers

ACM.7 Security considerations for containers used by batch jobs

Installing Git in a Container

ACM.278 Installing software in a container

How to Tell if You’re Inside a Container

ACM.279 Commands you can execute to try to figure out if your commands are executing inside a container

Cloning git Repositories in a Container

ACM.280 Executing commands when building an image versus when you run a container based on the image

Container Engines and Runtimes

ACM.278 Sorting all all the runtimes and why they exist

Leveraging Containers in Lambda for Governance, Secure Configurations, and Portability

ACM.288 Containers everywhere for consistency and compliance

Deploy an AWS Elastic Container Registry Repository with CloudFormation

ACM.282 Creating an ECR Repository to deploy containers in Lambda functions

Pushing a Container to the AWS Elastic Container Registry

ACM.287 A few simple commands to get our Docker container into ECR

Inconsistencies and Risks That Make AWS KMS Key Deployments Complicated

ACM.286 Troubleshooting a KMS Key Policy used for AWS ECR

Allow Lambda to Pull Containers from Elastic Container Registry

ACM.295 Add a policy to ECR to allow lambda to access images

Deploying a Lambda running a Container using CloudFormation

ACM.298 Leveraging ECR and our prior VPC with NAT deployment

Testing a Lambda function with the AWS Console and Enabling CloudWatch Logs and Metrics

ACM.299 Restricting Lambda functions to write to their own CloudWatch logs groups

Lambda Architecture vs. Container Architecture

ACM.300 Resolving errors caused by architecture mismatch

Fixing Application Errors Inside a Container Used By a Lambda Function and Redeploying It

ACM.301 The benefits and risks of redeploying a container used by a Lambda function

Testing Lambda Functions Locally Outside of Lambda

ACM.302 Using the AWS Lambda Runtime Interface Emulator (RIE) and how system architectures affect it

Why Do I Need a Language Specific Runtime in a Lambda Container?

ACM.303 Why doesn’t Lambda just run any OCI Compliant container?

Custom Lambda Runtimes

ACM.304 Overview of a custom Lambda runtime to execute bash scripts deployed in a container in Lambda

Custom Bash Runtime for Lambda Container

ACM.305 Using AWS base images for a container that runs a custom Lambda runtime

Adding Error Handling to Bash Custom Lambda Runtime

ACM.306 Using Bash trap to capture and handle errors in bash scripts

Using the Lambda Runtime Interface Emulator With a Custom Bash Runtime

ACM.307 Revisiting the RIE with a revamped Arm container for Lambda

A Bash Error Handler For a Bash Custom Lambda Runtime

ACM.319 Handling multiple errors and different types of errors in different functions

Where Are Your Yum Packages Coming From?

ACM.321 This issue could be applicable to any cloud provider — check where your packages originate on the network

Moving A Lambda Function to AWS Batch

ACM.328 Considering new risks in a different execution environment with different security configuration options

Building a Container for AWS Batch vs. AWS Lambda

ACM.328 Also trying to figure out which IP ranges are required for trusted downloads

AWS Lambda Security

Posts on Lambda Security by Teri Radichel

Container Escape Vulnerability in AWS Hot Patch

Update or mitigate now if you are affected (if you run containers, you probably are.)

Application Security

Compilation of stories on Application Security (AppSec) and Secure Code by Teri Radichel