What it means
Security depends on the management plane, host, images, runtime configuration, network boundaries, secrets, identity, and the degree of isolation provided by the technology.
Why it matters
These platforms improve flexibility but can concentrate risk when many workloads depend on one control plane or vulnerable base image.
Practical focus
- Harden and restrict the management plane
- Use trusted, minimal, and updated images
- Separate workloads according to sensitivity
- Monitor runtime behavior and configuration drift
Common mistakes
- Treating a container as a full security boundary
- Embedding secrets in images
- Leaving orchestration administration broadly accessible
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: