What it means
Containers share host and control-plane resources, so security depends on both isolation and the management systems that create, schedule, and update them.
Why it matters
Cloud-managed container platforms reduce some infrastructure work but do not remove customer responsibility for workload, identity, image, network, and data security.
Practical focus
- Use minimal trusted images and scan before deployment
- Restrict runtime privilege and host access
- Protect the orchestrator and workload identities
- Monitor image provenance and runtime behavior
Common mistakes
- Treating containers as virtual machines
- Running privileged workloads by default
- Allowing unsigned images from uncontrolled registries
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: