Container and Image Security Assessment on AWS by Futuralis

The Futuralis Container and Image Security Assessment focuses on the security of container artifacts from Dockerfile creation through registry storage and deployment.

Futuralis collects the approved Dockerfiles, images, registry configuration, and deployment specifications. Security engineers generate or review software bills of materials, scan operating-system and application dependencies, inspect build instructions, and validate high-risk findings.

Assessment work includes:

• Reviewing Dockerfiles and multi-stage build processes.
• Producing or analysing a software bill of materials.
• Scanning operating-system packages and application dependencies.
• Detecting embedded credentials, keys, tokens, and sensitive files.
• Reviewing base-image origin, age, support status, and digest pinning.
• Checking root users, Linux capabilities, writable filesystems, and privileged settings.
• Reviewing exposed ports, health checks, and container metadata.
• Assessing Amazon ECR permissions, encryption, scanning, and lifecycle policies.
• Evaluating tag immutability, image signing, and provenance controls.
• Reviewing Kubernetes or ECS task security settings included in scope.
• Prioritising vulnerabilities based on reachability and deployment context.

Deliverables include an image inventory, SBOM results, validated vulnerability register, Dockerfile findings, registry control review, base-image recommendations, remediation plan, executive summary, and technical report.