揭秘 Amazon ECS 上的共享安全模型.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.C N S 3 1 3Demystifying the shared security model on Amazon ECSJooyoung KimSenior Solutions ArchitectAmazon Web ServicesRe Alvarez ParmarPrincipal Solutions Architec

2、t,ContainersAmazon Web Services 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Agenda Amazon ECS Overview Shared responsibility on Amazon ECS Web Application on Amazon ECS Key Takeaway Conclusion 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon Elastic Co

3、ntainer ServiceFully managed container orchestration service for seamless deployment,scaling and securityOver 3 billion Amazon ECS tasks are launched every weekOver 65%of all new AWS container customer use Amazon ECS 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon ECS Core

4、Component5ClusterClusterLogical grouping of tasks and servicesService ServiceOne or more identical tasks Check and replace unhealthy tasks TaskOne or more containersSpecify compute,networking,IAM and config TaskTaskTask 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon ECS Co

5、mpute Options in the CloudAmazon EC2AWS Fargate 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Choosing your Amazon ECS data plane in the cloudChoose an instance type that meets the requirements of the workloadLeverage all EC2 pricing models,including Capacity Reservations,Reserv

6、ed Instances and SpotAmazon EC2CustomerRemove the operational overhead to manage serversWorkload isolation by designPay only for compute resources usedAWS Fargate 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon ECS Compute Options in the CloudAmazon EC2Amazon ECS Managed In