Compute resource protection

Compute resources include ECS instances, containers, Function Compute, database services, and Internet of Things (IoT) devices. Each resource type requires different protection methods. However, all methods are based on common mitigation policies. These policies include defense-in-depth, vulnerability management, reducing the attack surface, and automated Operations and Maintenance (O&M). You can use the following best practices to protect the compute resources for your critical services.

Best practices

• Centralize vulnerability management

• Use managed cloud products instead of self-built solutions

• Use services such as Bastionhost for workload O&M

• Use automation for workload security protection

• Use unified base images to deploy compute resources