Secure Application Container Security in the Cloud
Abbas Kudrati, Sina Manavi, Muhammed Aizuddin Zali · 2025
This chapter presents the specifics of securing the application containers in cloud environments, from the technical aspects to the process and threat intelligence methodologies. There are several best practices and key considerations for securing containerized platforms on popular cloud providers like Azure Kubernetes Service, Google Kubernetes Engine, and Amazon Elastic Kubernetes Service. The chapter presents critical topics including container image security, runtime protection, network security, CI/CD, and supply chain. The chapter shows how the best practices around cloud technology can be used to secure a container workload in the respective cloud environment. Threat intelligence plays a crucial role in proactively identifying, understanding, and mitigating threats specific to cloud-native container environments. The chapter also provides a few real-world examples that illustrate the importance of threat intelligence in cloud-native container environments: cryptocurrency mining malware in containers, Kubernetes API server vulnerability, and so on.