Record · corpus.blog/posts/01a08798-aa7f-722d-af29-41bf40074f24

ECS on EC2: Covering Gaps in IMDS Hardening

latacora.com · published 2 October 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at latacora.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 27
Words captured: 2,047

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://containersonaws.com

containersonaws.com

https://www.youtube.com/watch?v=C7HUkG_tu90

youtube.com

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html

docs.aws.amazon.com

https://containersonaws.com/blog/2023/ec2-or-aws-fargate/

containersonaws.com

https://aws.amazon.com/blogs/containers/theoretical-cost-optimization-by-amazon-ecs-launch-type-fargate-vs-ec2/

aws.amazon.com

https://aws.amazon.com/blogs/security/security-considerations-for-running-containers-on-amazon-ecs/

aws.amazon.com

https://rhinosecuritylabs.com/aws/weaponizing-ecs-task-definitions-steal-credentials-running-containers/

rhinosecuritylabs.com

https://labs.reversec.com/posts/2025/08/another-ecs-privilege-escalation-path

labs.reversec.com

https://www.sweet.security/blog/ecscape-understanding-iam-privilege-boundaries-in-amazon-ecs

sweet.security

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-versions.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-roles.html

docs.aws.amazon.com

https://thehackernews.com/2025/08/researchers-uncover-ecscape-flaw-in.html

thehackernews.com

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/security/get-the-full-benefits-of-imdsv2-and-disable-imdsv1-across-your-aws-infrastructure/

aws.amazon.com

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/aws/amazon-ec2-instance-metadata-service-imdsv2-by-default/

aws.amazon.com

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking-awsvpc.html

docs.aws.amazon.com

https://docs.aws.amazon.com/ec2/latest/instancetypes/gp.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-instance-addressing.html

docs.aws.amazon.com

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html

docs.aws.amazon.com

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/aws/announcing-amazon-ecs-managed-instances-for-containerized-applications/

aws.amazon.com

https://bottlerocket.dev/en/os/1.47.x/api/settings/ecs/

bottlerocket.dev

https://github.com/latacora/ecs-on-ec2-gaps-in-imds-hardening

github.com