Containers
Advice on mitigating the Apache log4j security issue for EKS, ECS, and Fargate customers
Note – AWS Fargate no longer supports the opt-in log4j Java hot patch capability for previously opted-in or new customers of Fargate as of 10-27-2023. Please ensure all containerised workloads leveraging the log4j package have been patched before scheduling them on to AWS Fargate. CVE-2021-44228 (and subsequently CVE-2021-45046) describe a security issue found in the […]
Amazon ECR’s credential helper now supports Amazon ECR Public
amazon-ecr-credential-helper is a credential helper for the Docker daemon that makes it easier to use Amazon Elastic Container Registry (ECR). Once configured, ECR credential helper automatically uses the same credentials as the AWS CLI and the AWS SDKs to first retrieve an ECR authentication token for secure access to repositories, then lets the Docker daemon […]
Advice for customers dealing with Docker Hub rate limits, and a Coming Soon announcement
Many container customers building applications use common software packages (e.g. operating systems, databases, and application components) that are publicly distributed as container images on Docker Hub. Docker, Inc. has announced that the Hub service will begin limiting the rate at which images are pulled under their anonymous and free plans. These limits will progressively take […]
