How are containers and deployments secured?
amaise uses the following measures for container and deployment security:
Private registry: Docker images are built in the CI/CD pipeline and pushed to a private container registry (AWS ECR). There is no public access to the registry.
Base images: Custom base images with only the necessary tools — no standard images with unnecessary packages.
Image origin: Images are created exclusively in the controlled CI/CD pipeline and stored in a private container registry. There are no external image sources.
Smoke tests: Automatic smoke tests are performed before every deployment.
Rolling deployments: Container services are updated via rolling updates to avoid downtime.
Automatic snapshots: A database snapshot is automatically created before every production deployment.
Rollback mechanism: In case of issues, rollback is possible via a documented process — database restoration within about 30 minutes, full recovery within about one hour.
The entire deployment process is automated and security-gated — from code changes through CI checks and review to deployment.