AWS ECS tasks running on EC2 instances face weak task-level isolation, leading to potential security risks like credential theft. The article highlights the importance of hardening configurations, particularly by restricting access to the EC2 Instance Metadata Service (IMDS), and discusses various networking modes and methods to effectively block IMDS access for ECS tasks.
aws ✓
ecs ✓
security ✓
imds ✓
containers ✓