Amazon ECS now allows customers to bring their own customer managed keys to encrypt ephemeral storage for AWS Fargate tasks, meeting regulatory requirements and security policies for key management and data encryption.

<div>
<p>This article explains how to enable and use customer managed keys (CMKs) to encrypt the ephemeral storage of Amazon ECS tasks running on AWS Fargate, providing enhanced security and compliance for regulated workloads.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Overview of AWS Fargate ephemeral storage encryption and compliance certifications</li>
<li>How to enable CMKs for Fargate ephemeral storage on new or existing ECS clusters</li>
<li>Using IAM policies to enforce encryption with CMKs</li>
<li>Auditing CMK encryption events in CloudTrail logs</li>
<li>Conclusion on meeting security requirements for Fargate workloads with CMKs</li>
</ul>
</div>


Securing Amazon ECS workloads on AWS Fargate with customer managed keys

Related articles

Related articles

Jun 10
2024
Amazon ECS on AWS Fargate now allows you to encrypt ephemeral storage with customer-managed KMS keys

Apr 3
2024
Unlocking AWS Fargate feature for attaching Amazon EBS Volumes to ECS Tasks

Jan 30
2024
Secure Amazon Elastic Container Service workloads with Amazon ECS Service Connect

Dec 28
2023
Using Amazon GuardDuty ECS runtime monitoring with Fargate and Amazon EC2