Securing your containers using AWS
There are a number of approaches we can take to securing containers in the cloud. We will start by looking at Amazon Web Services, commonly known as AWS. This section of the book assumes you are already familiar with working in AWS for hosting container-based projects. If you use a different service, such as Azure or GCP, then please feel free to skip ahead to the Azure container security and Google container security options sections respectively. The topic of AWS and container hosting is also discussed in Chapter 5, Alternatives for Deploying and Running Containers in Production, and Chapter 8, Deploying Docker Apps to Kubernetes. Let's take a look at the tools used for monitoring in AWS.
Security alerts for AWS with GuardDuty
A number of tools exist either in AWS or as third-party plugins that can be used to monitor your Amazon environment hosting your container infrastructure.
Amazon's major tool for monitoring security issues...