Container Security (NIST SP 800-190)

1. Image Risks

   Image vulnerabilities, configuration defects, embedded malware and secrets.

2. Registry Risks

   Insecure registry connections, stale images and authentication gaps.

3. Orchestrator Risks

   Unbounded administrative access, unauthorized access and poorly separated networks.

4. Container Risks

   Runtime software vulnerabilities, unbounded network access and insecure runtime configuration.

5. Host OS Risks

   Large attack surface, shared kernel and host OS component vulnerabilities.

6. Countermeasures

   Hardening tools, container-specific host OSes and vulnerability management.

7. SP 800-190 PDF

   Full publication text.

8. OWASP Docker Security

   Docker hardening rules.

9. Kubernetes Pod Security Standards

   Kubernetes pod-level security profiles.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• AWS Security Best Practices
• AWS Well-Architected Security Pillar
• Kubernetes Network Policies
• Kubernetes Pod Security Standards
• Kubernetes RBAC and Authentication
• Kubernetes Secrets
• Kubernetes Security
• Secrets Management Patterns