A logistics company runs its tracking application using containerized microservices on Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type. To maintain a robust security posture, the company needs to define the boundaries of the AWS Shared Responsibility Model for this serverless container environment.
Which of the following security tasks are the responsibility of the customer? (Select TWO.)
- Patching the software and dependencies running inside the application container imagesCevap
- Configuring security groups to control inbound and outbound network traffic to the ECS tasksCevap
- CPatching the underlying container host operating system and virtualization software
- DConfiguring stateless Network Access Control Lists (NACLs) at the task level to filter traffic to individual containers
- EManaging physical compliance audits and certifications for the AWS data center facilities
Cevap
The customer is responsible for patching software and dependencies inside the application container images and configuring security groups to control inbound and outbound network traffic to the ECS tasks.
Under the AWS Shared Responsibility Model, serverless services like AWS Fargate shift host management responsibilities to AWS. The customer remains responsible for securing container contents (such as application code and package dependencies) and defining task-level firewall rules (such as security groups).
Adım Adım Çözüm
Anahtar Kavram
Shared Responsibility Model for Serverless Container Services