Skip to content

Commit

Permalink
Update hardening_container_image.adoc (#611)
Browse files Browse the repository at this point in the history
  • Loading branch information
brunokktro authored Dec 20, 2024
1 parent 5b58f36 commit 1a390e9
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions latest/bpg/windows/hardening_container_image.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ We'll start by delving into why each of these security configurations is vital f

== 1. Configure Account Policies (Password or Lockout) using Local Security Policies and Registry

Windows Server Core is a minimal installation option that is available as part of the [EKS Optimized Windows AMI](https://docs.aws.amazon.com/eks/latest/Configuring Account Policies (Password or Lockout) using Local Security Policies and the Registry strengthens system security by enforcing robust password and lockout rules. These policies require users to create strong passwords with a defined minimum length and complexity, protecting against common password-related attacks.
Windows Server Core is a minimal installation option that is available as part of the [EKS Optimized Windows AMI](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html). Configuring Account Policies (Password or Lockout) using Local Security Policies and the Registry strengthens system security by enforcing robust password and lockout rules. These policies require users to create strong passwords with a defined minimum length and complexity, protecting against common password-related attacks.

By setting a maximum password age, users are prompted to regularly update their passwords, reducing the likelihood of compromised credentials. Lockout policies add an extra layer of protection by temporarily locking accounts after a specified number of failed login attempts, helping to prevent brute-force attacks. Configuring these settings via the Windows Registry allows administrators to enforce these security measures at the system level, ensuring uniformity and compliance throughout the organization. Applying these Account Policies in a Windows Container is essential for maintaining security consistency, even though containers are often ephemeral and intended for isolated workloads:

Expand Down Expand Up @@ -324,4 +324,4 @@ Securing Windows containers also aligns with regulatory requirements that mandat

In summary, the rise of containerized applications, coupled with the growing number of cyber threats, makes container security a nonnegotiable aspect of modern infrastructure management. By adhering to best practices and continuously monitoring for vulnerabilities, businesses can enjoy the agility and efficiency of Windows containers without compromising on security. In this threat-rich environment, securing your Windows containers is not just an option--it's a must-have.

📝 https://github.com/aws/aws-eks-best-practices/tree/master/latest/bpg/windows/hardening_container_image.adoc[Edit this page on GitHub]
📝 https://github.com/aws/aws-eks-best-practices/tree/master/latest/bpg/windows/hardening_container_image.adoc[Edit this page on GitHub]

0 comments on commit 1a390e9

Please sign in to comment.