Naor Haziz’s discovery shows how a compromised container on EC2-backed ECS tasks can impersonate the ECS agent and steal IAM ...

The post also notes that the Docker client used in ECS is the same one deployed elsewhere by Docker users, so Docker workloads can be moved to and from Amazon without issues. While EC2 machines ...