Internship← Cloud Security learning pathCloud Security · Module 5 of 10
Secure workloads and containers
Harden VMs, containers and serverless apps.
📖 Key ideas
- Patch operating systems and images regularly.
- Use minimal container images and scan them for vulnerabilities.
- Run containers as non-root with limited permissions.
- Serverless functions need least-privilege roles.
- Store secrets in secret managers, not code or images.
💡 Real-life example: Hardening workloads is servicing every vehicle in a fleet before it leaves the depot.
Image scanningChecking images for known vulnerabilities
Non-root containerContainer without admin privileges
Secret managerSecure secret storage
PatchingApplying security updates