Amazon ECS Adds Support for Adding or Dropping Linux Capabilities to Containers

Amazon EC2 Container Service (Amazon ECS) now allows you to add or drop Linux capabilities to containers through the use of Docker’s cap-add and cap-drop flags. Linux capabilities give fine grained access control to processes without granting them root access to a system. 
Quelle: aws.amazon.com