Scanning and monitoring – cloud and DevOps security for containers
Before we begin to look at specific tools for monitoring and scanning your containers, we shall first define exactly what we mean by the term monitoring in a security context.
As you have seen throughout this book, containers provide a mechanism to serve up applications in small self-contained environments. However, we need to ensure that released software does not suffer from performance degradation while running. For example, we need to know if a container is consuming a lot of resources and thereby impacting the overall performance of our environment. You may already have some understanding of this concept from Chapter 10, Monitoring Docker Using Prometheus, Grafana, and Jaeger.
Additionally, monitoring allows us to look for anomalies that may indicate that the system is under attack or has been compromised in some fashion. While elsewhere in this book monitoring has been focused on ensuring system stability...
