Naor Haziz’s discovery shows how a compromised container on EC2-backed ECS tasks can impersonate the ECS agent and steal IAM credentials from other tasks—without host access.

If you’re running Kubernetes on AWS, you can choose from several options; ECS, EKS, or AWS Fargate. But which is the best for you?