亚马逊社区 AMI 的安全性
我正在从事一个科学项目，并希望使用 Amazon EC2 来托管该项目。
现在，我正在检查现有的 AMI 以创建自己的 AMI，但我在 AMI 社区列表中找到了一个 AMI - 非常适合。
我的问题如下 - 社区 AMI 安全吗？恶意用户是否有可能以这样的方式创建 AMI，即可以将用户名/密码等发送到远程服务器或其他东西？亚马逊是否会进行任何类型的检查以确保这种情况不会发生？
我在亚马逊网站上找不到这些问题的答案。我很确定你们也会遇到同样的问题 - 您能提供答案吗？
问候
K
I am working for a scientific project and would like to use the Amazon EC2 to host the same.
Now, I was going through the existing AMIs to create my own, but I found one AMI in the community list of AMIs - which fits perfectly.
My question is the following - are the community AMIs safe? Is it possible for a malicious user to create an AMI in such a way that say the usernames/passwords etc can be sent to a remote server or something? Does Amazon do any sort of checking to make sure it cannot happen?
I couldnt find the answers to these in Amazon site. I am pretty sure that you guys would have felt the same issues - could you please provide your answers?
Regards
K
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
社区 AMI 并不是特别安全 - 如果您信任 AMI 的来源，应该没问题，但如果来源对您来说是未知的实体，您可能应该放轻松。
AMI 基本上允许您在映像中安装您想要的任何内容 - 如果您在处理这些问题时不谨慎，您可能会遇到许可问题或恶意软件。
我通常会创建自己的镜像，从我想要的基础镜像（Ubuntu）开始，然后安装所需的镜像。
The community AMIs are not especially safe - if you trust the source of the AMI, it should be okay, but if the source is an unknown entity to you, you should probably take it easy.
The AMIs basically allow you to install whatever you want in the image - you could have licensing issues or malicious software if you are not cautious in your approach to these.
I generally create my own, starting with a base image of what I want (Ubuntu) and installing what is needed.
请记住，您可以从 VMDK 创建映像，这样您就可以从基础操作系统创建您自己的映像，并添加软件直到准备就绪，然后将其上传为您自己的 AMI（当然，甚至可以将其添加到社区）。
Remember, you can create an image from a VMDK, so you could create your own image from the base os, and add software till you're ready, and then upload that as your own AMI (and of course, even then add it to the community).