Containers-roadmap: Feature Request: ECS-mediated Container Identity

[aaithal]

Benefits of doing so are documented here

[jefferai]

Offhand, the main things that we would need to be able to have feature parity with the EC2 method are:

• An increasing timestamp of some sort. Ideally the time of the request to the metadata service, but that does increase burden.
• An instance ID or some other kind of unique information that can be verified with a call to the external API.
• This information available in a signed form that is _only_ available from within the container.

[memory]

An enthusiastic +1 to this request.

[ftrimble]

Also +1. This is a legitimately useful security feature.

[panga]

+1

[lyoungblood]

+1

[jhmartin]

+1

[deverton]

This would be awesome to have as it would bring feature parity between our EC2 and ECS deployments.

[CpuID]

+1

[sec9]

+1
any update on this needed security feature ?

[hylaride]

+1