AWS Fargate Security with Sidecars

This post describes how to run Aqua MicroEnforcer as a sidecar container on AWS Fargate by exposing the enforcer binary via a volume (using the VolumesFrom feature) and mounting it into the application container so the enforcer launches the app without modifying the image; it also compares this sidecar approach with building the enforcer into images and discusses compatibility and cost considerations.