Contrast Security is Fully Compatible with Amazon Corretto
Loving our content? Subscribe now!
Get the latest content from Contrast directly to your mailbox. By subscribing, you will stay up to date with all the latest and greatest from Contrast.
Amazon recently released Corretto, a Java 8 runtime that is fully-compatible and license-compliant. Both Contrast Assess and Protect are fully compatible with Corretto – no changes are required to code or anything else for users of Amazon’s Java implementation.
Contrast Assess and Protect apply security controls within applications using a feature that was introduced back in Java 5 (Sept 2004). To quote the official JavaDoc on instrumentation, this feature specifically enables programs like Contrast to monitor program execution by “modification of the byte-codes of methods.”
This feature, in every Java Runtime Environment, means that Contrast will work with all Java implementations above Java 5, 6, 7, 8, 9, and so on.
Similar capabilities are used for other Contrast agents to instrument Ruby, Node, Python, etc.
Amazon Corretto is simply a build of the OpenJDK project: it neither introduces nor remediates any security risk. There are, however, two benefits to Amazon Corretto:
The benefit of Contrast with Amazon Corretto is that it provides the same security visibility, detection, and protection capabilities as it does in any other JRE.
All users should make their own decisions, however Contrast is able to support any decision without requiring changes.
The following information may be helpful, but is not intended to make or imply any recommendations:
Neither Java 9 or Java 10 were Long-Term Support builds. Premier support has already ended for both.
The Oracle license for Java 11 has changed significantly, with Oracle’s build being commercial-only.
Public versions of Java 11 and above can be obtained without cost, from the OpenJDK GPL distribution, AdoptOpenJDK, or a future version of Corretto.
Contrast will fully support all of these without changes, as it works entirely within the Java specification.
Get the latest content from Contrast directly to your mailbox. By subscribing, you will stay up to date with all the latest and greatest from Contrast.