Containers

Managing compute for Amazon ECS clusters with capacity providers.

Customers running containers are often challenged with having to manage and understand how to run and scale the compute for their clusters. For customers taking advantage of Amazon Elastic Container Service (Amazon ECS) on AWS Fargate, the burden is lifted as the underlying compute layer is fully managed by AWS, enabling the customer to focus […]

Policy-based countermeasures for Kubernetes – Part 2

Choosing the Right Policy-As-Code Solution In Part 1 of this series, we introduced the concept of policy-as-code (PaC), and discussed the following solutions: OPA, OPA/Gatekeeper and MagTape. In this post (Part 2) we will review the Kyverno and k-rail PaC solutions. For Kubernetes, there are several PaC solutions available in the open-source software (OSS) community. […]

Policy-based countermeasures for Kubernetes – Part 1

Choosing the right policy-as-code solution This is Part 1 in a two part series where we discuss policy-as-code solutions. As more organizations adopt containerization as a delivery strategy, the need for automated security, compliance, and privacy controls that detect, prevent, reduce, and counteract known and unknown threats, has increased. Out of this increased need for […]

Preparing for Kubernetes API deprecations when going from 1.15 to 1.16

Note: The contents of this blog are no longer up to date as the referenced Amazon EKS Kubernetes version is no longer supported. Refer to the Amazon EKS Kubernetes versions AWS documentation for up to date information on supported Amazon EKS Kubernetes versions.   The way that Kubernetes evolves and introduces new features is via […]

How Vanguard uses AWS X-Ray and Amazon CloudWatch to improve observability for Amazon ECS cloud applications

This post was contributed by Jeffrey Emberger, Technical Lead, The Vanguard Group and John Formento, Solutions Architect, AWS. Cloud applications are changing the speed at which companies can deliver new capabilities for their customers. With increased speed comes the need to more quickly, reliably, and inexpensively observe cloud application health. Observability is no longer an […]

Utilizing NVIDIA Multi-Instance GPU (MIG) in Amazon EC2 P4d Instances on Amazon Elastic Kubernetes Service (EKS)

In November 2020, AWS released the Amazon EC2 P4d instances. The Amazon EC2 P4d instances deliver the highest performance for machine learning (ML) training and high performance computing (HPC) applications in the cloud. This instance comes with the following characteristics: Eight NVIDIA A100 Tensor core GPUs 96 vCPUs 1 TB of RAM 400 Gbps Elastic […]

What’s new with Red Hat OpenShift Service on AWS

Customers have been able to deploy application workloads within Red Hat OpenShift on AWS for several years. AWS and Red Hat have continued to respond to customer feedback and reduce effort and help customers meet the agility requirements they desire. Modernization does not stop at the evolution of applications, but touches on every aspect of […]

Setting up end-to-end TLS encryption on Amazon EKS with the new AWS Load Balancer Controller

In this blog post, I’ll show you how to set up end-to-end encryption on Amazon Elastic Kubernetes Service(Amazon EKS). End-to-end encryption in this case refers to traffic that originates from your client and terminates at an NGINX server running inside a sample app. I work with regulated customers who need to satisfy regulatory requirements like […]

Introducing Amazon EFS CSI dynamic provisioning

As companies move more of their workloads to Kubernetes, they are increasingly deploying applications that need a way to share or persist data or state outside the container. Kubernetes addresses this need by exposing block and file storage systems to containerized workloads via the Container Storage Interface (CSI). Amazon Elastic Kubernetes Service (Amazon EKS) currently […]

Advertising click-prediction modeling on Amazon EKS

In digital advertising, the ad click-through rate (CTR) model predicts the probability of a click given the ads and context x (for example, shopping query, time of the day, device). The output of a CTR model can be seen as a conditional probability p(y = click|x). A precise estimation of this probability influences our ability […]