3 ms·
This is incredibly true. The only requirement for an ECS cluster member is to be running the ECS agent - which is a Golang binary. You're free to run a CIS har
by OhSoHumble 7y ago
This is incredibly true. The only requirement for an ECS cluster member is to be running the ECS agent - which is a Golang binary.
You're free to run a CIS hardened image if you desire to do so.
- ed6612 7y agoThis is how we roll. CIS as base, Packer to customize (ecs agent, docker) into own AMIs.
- fovc 7y agoAre there OSS or commercial AMIs that have been hardened? Maybe some RHEL or CentOS?
- OhSoHumble 7y agoYeah, if you look at the AWS image marketplace then you'll find some.
- zo1 7y agoFor some odd reason, I find the AWS marketplace a bit suspect looking. Not saying that it is, just that that's my impression of it.