Amazon ECS now allows customers to bring their own customer managed keys to encrypt ephemeral storage for AWS Fargate tasks, meeting regulatory requirements and security policies for key management and data encryption.

<div>
<p>This article explains how to enable and use customer managed keys (CMKs) to encrypt the ephemeral storage of Amazon ECS tasks running on AWS Fargate, providing enhanced security and compliance for regulated workloads.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Overview of AWS Fargate ephemeral storage encryption and compliance certifications</li>
<li>How to enable CMKs for Fargate ephemeral storage on new or existing ECS clusters</li>
<li>Using IAM policies to enforce encryption with CMKs</li>
<li>Auditing CMK encryption events in CloudTrail logs</li>
<li>Conclusion on meeting security requirements for Fargate workloads with CMKs</li>
</ul>
</div>


Securing Amazon ECS workloads on AWS Fargate with customer managed keys

Related articles

Related articles

Jun 10
2024
Amazon ECS on AWS Fargate now allows you to encrypt ephemeral storage with customer-managed KMS keys

Apr 3
2024
Unlocking AWS Fargate feature for attaching Amazon EBS Volumes to ECS Tasks

Jul 29
2024
Strengthening data security in AWS Step Functions with a customer-managed AWS KMS key

Jun 17
2024
AWS KMS now supports Elliptic Curve Diffie-Hellman (ECDH) key agreement