Chapter 15: Scanning, Monitoring, and Using Third-Party Tools

So far, we have explored how we can manually configure our Docker containers to ensure security is a priority. In this chapter, we will look at some of the tools available to automatically scan our images and monitor our production loads. This will provide a jumping off spot for you to expand your Docker-based projects further, based upon your cloud provider if you use one.

We will start off by looking at DevOps solutions such as Anchore Engine for scanning images for security vulnerabilities, review docker stats and learn how it is useful, set up cAdvisor for local monitoring, and understand how Datadog can be used as a cloud-based solution for gathering container stats.

This chapter will also briefly review AWS security options including GuardDuty for monitoring production environments and cover some of the features that Microsoft Azure offers. You'll gain an understanding of what tools are available to Google...