Workload protection for AWS Fargate

Hey João Casaroto

We have investigated options for Fargate but have not targeted a release at this time. Serverless environments, such as Fargate, require no privileged containers or access which is required for our sensor container. This limitation for privileged containers in Fargate is by design and makes sense as the provider owns the underlying infrastructure. 

In Optix, there is still the option for scanning the container images which will work regardless of whether the images are then used when deploying containers in Amazon EKS or Fargate (https://docs.sophos.com/pcg/optix/help/en-us/AddEnvironments/Containers/index.html). 

Hey João Casaroto

We have investigated options for Fargate but have not targeted a release at this time. Serverless environments, such as Fargate, require no privileged containers or access which is required for our sensor container. This limitation for privileged containers in Fargate is by design and makes sense as the provider owns the underlying infrastructure. 

In Optix, there is still the option for scanning the container images which will work regardless of whether the images are then used when deploying containers in Amazon EKS or Fargate (https://docs.sophos.com/pcg/optix/help/en-us/AddEnvironments/Containers/index.html).