Container network security firm NeuVector Inc. today said it’s integrating its security tools with some of Amazon Web Services Inc.’s public cloud infrastructure services to help companies running Kubernetes workloads better protect those deployments.

The integrations cover Amazon services including AWS Elastic Container Service for Kubernetes, AWS Elastic Container Service and AWS App Mesh, the company said. The idea is to help companies automatically protect software containers, which are used to host modern applications that can run on any hardware, throughout their entire lifecycles.

NeuVector said it helps to protect these workloads by providing “Policy as a Code” automation for container deployments on AWS infrastructure. It does this by leveraging something called “Kubernetes ConfigMaps,” which are application programming interface resources the company has created that provide mechanisms to inject containers with configuration data while keeping them agnostic of Kubernetes.

The idea is that companies can secure their Kubernetes deployments by setting up “predefined configurations” that govern access to and the behavior of their applications, NeuVector Chief Technology Officer Gary Duan told SiliconANGLE.

“Predefined configurations can include users, registries waiting to be scanned, container auto-scanning, admission control rules, SIEM integration for notifications, and security policies,” Duan said. “By using these, customers ensure a consistent and error-free deployment of NeuVector, which is especially valuable for automated deployment of multiple-container clusters.”

NeuVector also provides what it calls a “declarative security policy” tool that developers can use to predefine runtime security rules throughout their application lifecycles. In addition, the integration adds some extra controls for “process and file system blocking,” as well as a “process history recording” feature to aid with forensic investigations into security breaches.

Besides the AWS integrations, NeuVector has updated its basic container security firewall and runtime vulnerability scanning tools with new features, including a multilayer image scanning tool that provides analysis of potential vulnerabilities and a new dashboard wizard that provides security recommendations.

Image: TheDigitalArtist/Pixabay