The tasks can take advantage of iam roles security groups and other aws security features.
Aws ecs container.
Amazon elastic container service amazon ecs is a highly scalable fast container management service that makes it easy to run stop and manage containers on a cluster.
Installing and configuring the cloudwatch agent after you have added the ecs cloudwatchlogs policy to your ecsinstancerole you can install the cloudwatch agent on your container instances.
Aws provides strong security isolation between your containers ensures you are running the latest security updates and gives you the ability to set granular access permissions for every container.
An amazon ecs container instance is an amazon ec2 instance that is running the amazon ecs container agent and has been registered into an amazon ecs cluster.
For more information see download and configure the cloudwatch agent using the command line in the amazon cloudwatch user guide.
Applications must sign their aws api requests with aws credentials and this feature provides a strategy for managing credentials for your applications to use similar to the way that amazon ec2 instance profiles provide credentials to ec2 instances.
Using ec2 container service ecs was designed to be easy to set up and.
Aws offers 210 security compliance and governance services and key features which is about 40 more than the next largest cloud provider.
Amazon elastic container service amazon ecs is a highly scalable fast container management service that makes it easy to run stop and manage docker containers on a cluster of amazon ec2 instances.
Amazon elastic container service amazon ecs is a fully managed container orchestration service.
You can run your tasks and services on a serverless infrastructure that is managed by aws fargate or for more control.
Containers run in a multi tenant environment and can communicate with each other only across defined interfaces.
Amazon elastic container service documentation.
With iam roles for amazon ecs tasks you can specify an iam role that can be used by the containers in a task.
Your containers are defined in a task definition which you use to run individual tasks or as a service.