Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

AWS Security
AWS Security
Published July 1, 2026Original Report

Excerpt

Today, you can use AWS Network Firewall to protect traffic flowing to and from containerized applications on Amazon Elastic Kubernetes Service (Amazon EKS) and Amazon Elastic Container Service (Amazon ECS) clusters. If you run AI and machine learning (ML) workloads on Amazon EKS—such as model inference, RAG pipelines, or JupyterHub—your containerized workloads require the same firewall protections you enforce for traditional applications. However, traditional firewall rules…

Read the original report →

Attack Flow6 steps · MITRE ATT&CK mapped

Defense EvasionTA0005T1090.003
1/6
Proxy: Multi-hop Proxy
ActionRoute traffic through firewall
The report describes using AWS Network Firewall to protect containerized workloads, implying traffic is routed through the firewall, potentially acting as a proxy.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA122d200f8670dbdb3e253a90eee5098477c95c23dHighScore 82/100First seen

IOC Relationship Graph

Building graph…