The Pros and Cons of Agent Based Container Runtime Protection

GuardDuty is able to ingest logs. They are able to detect I think all sorts of anomalies. What it lacks is the ability to prevent something on the cluster. So we pivoted into the agent based sort of threat detection and prevention. But again, there's other drawbacks. Some of the runtime agents don't work. Within the clusters, you may have different type of networking,. A lot of teams like service meshes nowadays, that's like the new thing. GuardDuty kind of makes it in line.

Transcript

Play full episode

Transcript

Episode notes

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.

Get the app