avatarTeri Radichel

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

7422

Abstract

AWS Elastic Container Registry</h2> <div><h3>ACM.287 A few simple commands to get our Docker container into ECR</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*agkzjAKdJojHYqRAcS3XNA.png)"></div> </div> </div> </a> </div><div id="22a3" class="link-block"> <a href="https://readmedium.com/inconsistencies-and-risks-that-make-aws-kms-key-deployments-complicated-14d6698d9381"> <div> <div> <h2>Inconsistencies and Risks That Make AWS KMS Key Deployments Complicated</h2> <div><h3>ACM.286 Troubleshooting a KMS Key Policy used for AWS ECR</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_agwpey6uK5OZK2ZikfsPg.png)"></div> </div> </div> </a> </div><div id="c162" class="link-block"> <a href="https://readmedium.com/allow-lambda-to-pull-containers-from-elastic-container-registry-123d05325bb7"> <div> <div> <h2>Allow Lambda to Pull Containers from Elastic Container Registry</h2> <div><h3>ACM.295 Add a policy to ECR to allow lambda to access images</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*CumVpsQvYpXv6wgO-p9diQ.png)"></div> </div> </div> </a> </div><div id="d638" class="link-block"> <a href="https://readmedium.com/deploying-a-lambda-running-a-container-using-cloudformation-387e6d511b91"> <div> <div> <h2>Deploying a Lambda running a Container using CloudFormation</h2> <div><h3>ACM.298 Leveraging ECR and our prior VPC with NAT deployment</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*wep3eH13un5ywHhl5TUGpw.png)"></div> </div> </div> </a> </div><div id="b83e" class="link-block"> <a href="https://readmedium.com/testing-a-lambda-function-with-the-aws-console-and-enabling-cloudwatch-logs-and-metrics-816528863863"> <div> <div> <h2>Testing a Lambda function with the AWS Console and Enabling CloudWatch Logs and Metrics</h2> <div><h3>ACM.299 Restricting Lambda functions to write to their own CloudWatch logs groups</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*cQqUwapyvFanUgMs7jKTGQ.png)"></div> </div> </div> </a> </div><div id="87a1" class="link-block"> <a href="https://readmedium.com/lambda-architecture-vs-container-architecture-e3256879a6d6"> <div> <div> <h2>Lambda Architecture vs. Container Architecture</h2> <div><h3>ACM.300 Resolving errors caused by architecture mismatch</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_c-BvVueHHT8eXrPVldrNA.png)"></div> </div> </div> </a> </div><div id="c11c" class="link-block"> <a href="https://readmedium.com/fixing-application-errors-inside-a-container-used-by-a-lambda-function-and-redeploying-it-49a8c4804c07"> <div> <div> <h2>Fixing Application Errors Inside a Container Used By a Lambda Function and Redeploying It</h2> <div><h3>ACM.301 The benefits and risks of redeploying a container used by a Lambda function</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*WoAvTpNvH2AcEzhDc3tA2w.png)"></div> </div> </div> </a> </div><div id="e49b" class="link-block"> <a href="https://readmedium.com/testing-lambda-functions-locally-outside-of-lambda-f7126d20421a"> <div> <div> <h2>Testing Lambda Functions Locally Outside of Lambda</h2> <div><h3>ACM.302 Using the AWS Lambda Runtime Interface Emulator (RIE) and how system architectures affect it</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*8Zid7OyczpHEE731tMIkkw.png)"></div> </div> </div> </a> </div><div id="65c0" class="link-block"> <a href="https://readmedium.com/why-do-i-need-a-language-specific-runtime-in-a-lambda-container-103dcfb5cb5c"> <div> <div> <h2>Why Do I Need a Language Specific Runtime in a Lambda Container?</h2> <div><h3>ACM.303 Why doesn’t Lambda just run any OCI Compliant container?</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*Srt_jGpotiOOO_Lci1BmZw.png)"></div> </div> </div> </a> </div><div id="fed7" class="link-block"> <a href="https://readmedium.com/custom-lambda-runtimes-6da9977eabfe"> <div> <div> <h2>Custom Lambda Runtimes</h2> <div><h3>ACM.304 Overview of a custom Lambda runtime to execute bash scripts deployed in a container in Lambda</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*FZEpE2nJa4A_sKWEkOFuWg.png)"></div> </div> </div> </a> </div><div id="cd93" class="link-block"> <a href="https://readmedium.com/custom-bash-runtime-for-lambda-container-bec64ab33582"> <div> <div> <h2>Custom Bash Runtime for Lambda Container</h2> <div><h3>ACM.305 Using AWS base images for a container that runs a custom Lambda runtime</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*nZNnuwdt1s2q5L7RGJq7aw.png)"></div> </div> </div> </a> </div><div id="5fa4" class="link-block"> <a href="https://readmedium.com/adding-error-handling-to-bash-custom-lambda-runtime-29d3f1c94441"> <div> <div> <h2>Adding Error Handling to Bash Custom Lam

Options

bda Runtime</h2> <div><h3>ACM.306 Using Bash trap to capture and handle errors in bash scripts</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*kLGyFgwhGc1ZYyr1cdgZxg.png)"></div> </div> </div> </a> </div><div id="b857" class="link-block"> <a href="https://readmedium.com/using-the-lambda-runtime-interface-emulator-with-a-custom-bash-runtime-f3bd77d61a8c"> <div> <div> <h2>Using the Lambda Runtime Interface Emulator With a Custom Bash Runtime</h2> <div><h3>ACM.307 Revisiting the RIE with a revamped Arm container for Lambda</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*a8hiTPVLb-TP5Xxyd-8duA.png)"></div> </div> </div> </a> </div><div id="b6be" class="link-block"> <a href="https://readmedium.com/a-generic-bash-error-handler-for-a-bash-custom-lambda-runtime-interface-6e0c55f5252b"> <div> <div> <h2>A Bash Error Handler For a Bash Custom Lambda Runtime</h2> <div><h3>ACM.319 Handling multiple errors and different types of errors in different functions</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*i1Jw12XnI3NQm2eR7i8Vag.png)"></div> </div> </div> </a> </div><div id="e546" class="link-block"> <a href="https://readmedium.com/where-are-your-yum-packages-coming-from-f7fa7a504636"> <div> <div> <h2>Where Are Your Yum Packages Coming From?</h2> <div><h3>ACM.321 This issue could be applicable to any cloud provider — check where your packages originate on the network</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*He_J5WcOgKMPxuAVFl7i0Q.png)"></div> </div> </div> </a> </div><div id="bec2" class="link-block"> <a href="https://readmedium.com/moving-a-lambda-function-to-aws-batch-a6ceb83e8cfd"> <div> <div> <h2>Moving A Lambda Function to AWS Batch</h2> <div><h3>ACM.328 Considering new risks in a different execution environment with different security configuration options</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*553gLhsEsDbo_Ok2t4xqmQ.png)"></div> </div> </div> </a> </div><div id="18a6" class="link-block"> <a href="https://readmedium.com/building-a-container-for-aws-batch-vs-aws-lambda-e586cda9a987"> <div> <div> <h2>Building a Container for AWS Batch vs. AWS Lambda</h2> <div><h3>ACM.328 Also trying to figure out which IP ranges are required for trusted downloads</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*CeeTyuQvWEAPaj7pqW0yWw.png)"></div> </div> </div> </a> </div><p id="a5c3">More on using containers with Lambda here:</p><div id="30d8" class="link-block"> <a href="https://readmedium.com/aws-lambda-security-2f70d1481c67"> <div> <div> <h2>AWS Lambda Security</h2> <div><h3>Posts on Lambda Security by Teri Radichel</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*JrQ4vUdhgEtyJHnr9wqOPw.png)"></div> </div> </div> </a> </div><p id="3a78">Examples of container vulnerabilities</p><div id="98ee" class="link-block"> <a href="https://readmedium.com/container-escape-vulnerability-in-aws-hot-patch-bed4211e59e"> <div> <div> <h2>Container Escape Vulnerability in AWS Hot Patch</h2> <div><h3>Update or mitigate now if you are affected (if you run containers, you probably are.)</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*AkdhfEzQWBaFzg5USpTy3w.png)"></div> </div> </div> </a> </div><p id="880d">Related stories on application security:</p><div id="70bc" class="link-block"> <a href="https://readmedium.com/application-security-77580cf52d1d"> <div> <div> <h2>Application Security</h2> <div><h3>Compilation of stories on Application Security (AppSec) and Secure Code by Teri Radichel</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*B_bcpLcdlf2nPmoGLBgh6A.png)"></div> </div> </div> </a> </div><p id="72ae">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

Container Security

Posts on Docker, Containers, and Container Security by Teri Radichel

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: Appsec | Secure Code | Multicloud Security

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Container basics — what are they and why would you want to use them?

Container Runtime Security — tracking actions related to containers at the operating system level.

How might containers be compromised?

More on using containers with Lambda here:

Examples of container vulnerabilities

Related stories on application security:

Follow for updates.

Teri Radichel | © 2nd Sight Lab 2023

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab
Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation
Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab
Container
Security
Application
Topics
Docker
Recommended from ReadMedium