Bouncer controls a Docker container's access to sensitive assets such as volumes and networks. It provides a plugin interface to Docker so a container's access to the resource can be removed on-the-fly if it fails to meet the defined criteria.