ECS Cluster And Container Fargate Type Qustion

Question

The current environment has also built both ECSCluster Fargate and Container types with Fargate.
To improve container security, we would like to create a user other than Root privileges and run the container.
By the way, if it's a Fargate type, it's Serverless, but without customizing it and using the permissions of the user at the time of container execution
I'd like to know if it can be done.

Answer

Yes, it is possible to run your container with an arbitrary user. In your Dockerfile, you should create an user, and [use the `USER` directive](https://docs.docker.com/engine/reference/builder/#user) to change the default user in your container.

```bash
FROM microsoft/windowsservercore
# Create Windows user in the container
RUN net user /add patrick
# Set it for subsequent commands
USER patrick
```

> By the way, if it's a Fargate type, it's Serverless, but without customizing it and using the permissions of the user at the time of container execution

Since it is serverless, you cannot manage the Docker's host machine (NOT the container) and I don't think you need to. The security responsibility lies on AWS, not you.

ECS Cluster And Container Fargate Type Qustion

相关内容