--- title: Secure Container Data Storage with ECS and EFS - ClearDATA description: ClearDATA's addition of EFS support for our AWS offering allows customers to mount data without worrying about container restarts or cluster node placement. image: https://cspm.cleardata.com/hubfs/Imported_Blog_Media/chuttersnap-339389-unsplash-scaled-1-2.jpg --- [Log in to the CyberHealth™ Platform](http://cyberhealth.cleardata.com/) [Talk to a Cloud Expert](https://www.cleardata.com/consultation/) [![Clear data](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/cleardata-logo.svg)](https://www.cleardata.com/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-to-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP for Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments in the Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - - [View All](https://www.cleardata.com/resources/) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Customer Stories](https://www.cleardata.com/stories/) - [Events](https://www.cleardata.com/events/) - [About](https://www.cleardata.com/about-us/) - - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Partners](https://www.cleardata.com/supported-clouds/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-to-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP for Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments in the Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - - [View All](https://www.cleardata.com/resources/) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Customer Stories](https://www.cleardata.com/stories/) - [Events](https://www.cleardata.com/events/) - [About](https://www.cleardata.com/about-us/) - - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Partners](https://www.cleardata.com/supported-clouds/) [AWS](https://cspm.cleardata.com/cleardata-blog/tag/aws) # Secure Container Data Storage with ECS and EFS September 28, 2018 7 minute read [mailto:?body=https://cspm.cleardata.com/cleardata-blog/blog/secure-container-data-storage-ecs-efs](mailto:?body=https://cspm.cleardata.com/cleardata-blog/blog/secure-container-data-storage-ecs-efs) ### [![2024-Threat-Report-data-1](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/2024-Threat-Report-data-1.jpg) Guide 2024 Healthcare Threat Report Learn More](https://www.cleardata.com/resources/healthcare-threat-report/) #### Table of Contents ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/conor-colgan-200x200-4.jpg?width=200&height=200&name=conor-colgan-200x200-4.jpg) *by **Conor Colgan**Technical [Product](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) Manager, [AWS](https://www.cleardata.com/cspm/aws/) [ClearDATA](https://www.cleardata.com/)* In 2017, ClearDATA launched the first Containers-as-a-Service offering specifically aimed at enabling healthcare IT and DevOps organizations to take advantage of microservice architecture, while ensuring [compliance](https://www.cleardata.com/healthcare-cloud-compliance/). As we said then, “The ongoing security maintenance of applications, whether in testing or production mode, is a frequent burden to healthcare organizations and digital health companies, especially when [protected health information](https://www.cleardata.com/blog/understanding-and-combating-healthcare-cybersecurity-threats-today/) is at stake. To assist these companies, ClearDATA, an AWS Healthcare Competency and Public Sector Partner, works with Amazon ECS to provide a secure container management resource that offers an isolated, HIPAA-compliant environment for building, testing and running individual applications.” Today I am excited to announce new features for that solution. ### **Container Health Checks** Earlier this year Amazon announced support for native Docker health checks, allowing ECS to monitor and respond to health checks rather than a load balancer.  These health checks can be enabled as part of the task definition in the console ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/healthcheck-2.png?width=852&height=333&name=healthcheck-2.png) Or the command line ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/command-line-2.png?width=860&height=235&name=command-line-2.png) Docker performs does localhost calls and adjusts the availability status of the container based on that availability. It’s configurable in the ECS task definition directly.  ECS knows the “intent” of a container status and it just looks like ECS is keeping the status as “starting”.  If it’s trying to start up it’ll just leave it out of the pool until the health check passes. ClearDATA [customers](https://www.cleardata.com/cloud-case-studies/) are already taking advantage of these health checks in our PHI Containers [platform](https://www.cleardata.com/cleardata-cyber-health-platform/) and are seeing the native Docker behavior as expected.  For more information on how to configure health checks, see the [AWS ECS Documentation – HealthCheck command](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_HealthCheck.html). ### **Local File System Support with Automated Safeguards for Amazon EFS** Docker Containers are ideal for application development because they create the entire runtime environment (code, runtime, system tools, system libraries) in one binary artifact, so the differences between [environments](https://www.cleardata.com/cleardata-managed-services-regulated-environments/) are negligible. This guarantees that software runs consistently, regardless of the environment in which it is deployed. These containers are typically ephemeral and stateless, so they can be moved or terminated at any time. Containers typically do not store any data locally, rather they use other [services](https://www.cleardata.com/services-descriptions/) like [S3](https://www.cleardata.com/blog/strengthening-your-cloud-defense-against-aws-s3-bucket-exploits/) or a database, to store any data that requires a home. Containers can mount a storage volume that is present on the compute host, but that presents other challenges. Containers can be restarted on any compute node in the cluster, so that storage volume will no longer be available. A network attached storage solution such as Amazon Elastic File System (EFS) can help solve that problem. Amazon EFS is a durable shared file system that allows multiple EC2 hosts to connect to the same volume. EFS is also elastic, meaning there is no need to expand or shrink the volume as it’s used. You simply pay for the exact amount of data that is stored on the volume. Finally, data management is simplified because there is only a single data volume. ClearDATA’s Automated Safeguards for ECS now support securely mounting ClearDATA-safeguarded EFS volumes, enabling organizations to created containers that can consume data located on local storage without reconfiguring the application to hook into a different storage system.  It also allows ECS containers to share a file system with EC2 servers, allowing for easy integration of software running across multiple services. ClearDATA’s Automated Safeguard for EFS ensures that any EFS File System is provisioned with encryption at rest enabled. ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/encryption-2.png?width=974&height=150&name=encryption-2.png) In the event a File System is deployed without the encryption flag, the Automated Safeguard will remove the File System in a matter of minutes, as the encryption setting cannot be changed after a File System is created. ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/file-system-access-2.png?width=974&height=239&name=file-system-access-2.png) Customers can receive alerts for a non-compliant volume, making users aware of any volumes created without encryption. ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/aws-account-2.png?width=633&height=252&name=aws-account-2.png) ClearDATA’s combination of the PHI Containers platform and the Automated Safeguards for EFS ensures that all volumes provisioned for use with containers will be encrypted at rest. Furthermore, ClearDATA has configured the EFS mounts from the cluster nodes to connect to EFS via an encrypted channel thereby ensuring encryption at motion as well. Customers can access EFS mounts from our PHI Containers platform and know that the PHI data is always encrypted at rest and in motion without investing time in monitoring the compliance of the EFS storage. ### **Conclusion** ClearDATA’s addition of EFS support for our AWS offering allows customers to mount data without worrying about container restarts or cluster node placement. Each instance maintains a connection to the EFS file share, and the important data. All storage is encrypted at rest, and all connections to the EFS file share are encryption in motion. This removes the burden from configuring encrypted connection at the application layer, allowing customers to focus on their application and not the underlying infrastructure. Secure Your Healthcare Cloud ## Speak with a healthcare cybersecurity and compliance expert today. [Speak with an expert](https://www.cleardata.com/consultation/) ### [![Automated Safeguard Data Feed For GCP](https://cspm.cleardata.com/hubfs/Imported_Blog_Media/farzad-nazifi-71686-unsplash-scaled-1-2.jpg) Automated Safeguard Data Feed For GCP](https://cspm.cleardata.com/cleardata-blog/blog/automated-safeguard-data-feed-for-gcp) ### [![Kubernetes Compliant Solutions Enable Healthcare Innovation](https://cspm.cleardata.com/hubfs/Imported_Blog_Media/ani-kolleshi-684082-unsplash-scaled-1-2.jpg) Events Kubernetes Compliant Solutions Enable Healthcare Innovation](https://cspm.cleardata.com/cleardata-blog/blog/kubernetes-healthcare-innovation) ### [![ClearDATA Achieves AWS Life Sciences Competency Status](https://cspm.cleardata.com/hubfs/Imported_Blog_Media/aws_v1-2.jpg) Award ClearDATA Achieves AWS Life Sciences Competency Status](https://cspm.cleardata.com/cleardata-blog/blog/cleardata-aws-life-sciences-competency) [![Clear data](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/cleardata-logo.svg "Clear data")](https://www.cleardata.com/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-To-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/healthcare-providers/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP For Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments In The Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - [View All](https://www.cleardata.com/resources) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Events](https://www.cleardata.com/events/) - [Customer Stories](https://www.cleardata.com/cloud-case-studies/) - About - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Cloud Partners](https://www.cleardata.com/supported-clouds) - [Microsoft Azure](https://www.cleardata.com/cspm/microsoft-azure/) - [Amazon Web Services (AWS)](https://www.cleardata.com/cspm/aws/) - [Google Cloud Platform](https://www.cleardata.com/cspm/google-cloud/) © 2026 CLEARDATA All rights reserved - [Privacy Policy](https://www.cleardata.com/legal/privacy-policy) - [Notice of Copyright Infringement](https://www.cleardata.com/legal/notice-of-copyright-infringement) - [Acceptable Use Policy](https://www.cleardata.com/legal/acceptable-use-policy/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Conor Colgan", "url" : "https://cspm.cleardata.com/cleardata-blog/author/conor-colgan" }, "dateModified" : "2025-09-18T21:09:56.741Z", "datePublished" : "2018-09-28T10:00:02.000Z", "headline" : "Secure Container Data Storage with ECS and EFS - ClearDATA", "image" : [ "https://cspm.cleardata.com/hubfs/Imported_Blog_Media/chuttersnap-339389-unsplash-scaled-1-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://cspm.cleardata.com/cleardata-blog/blog/secure-container-data-storage-ecs-efs", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cspm.cleardata.com/hubfs/ClearDATA-logo-1540.png" } } } ```