BlueLock Runtime Security for Serverless Containers¶
BlueLock is the AccuKnox open-source engine for runtime security where you cannot reach the host, such as AWS Fargate and Azure Container Apps. It runs inside the workload and enforces KubeArmor policy. See the BlueLock repository.
Choose Your Environment¶
How BlueLock Enforces Policy¶
BlueLock applies a seccomp filter, traces system calls with ptrace and returns -EACCES when a call violates policy. It enforces on the application it launches and on that application's child processes.