Containers
Serverless containers at AWS re:Invent 2023
AWS re:Invent is the learning conference hosted by AWS for the global cloud computing community. This year the Amazon Elastic Container Service (Amazon ECS) and the AWS Fargate teams share their best practices and tips to help you increase productivity, optimize your costs, and amplify business agility. Join us in Las Vegas from November 27 […]
On-premises egress design patterns for Amazon EKS
Introduction When adopting a Kubernetes platform, architect teams are often highly focused on INGRESS traffic patterns. Why? Kubernetes has a first-class support for in-cluster traffic flows as well as into-cluster traffic flow implemented by ClusterIP and the INGRESS constructs .The object model allows the load balancing of Kubernetes pods natively and also extends the constructs […]
Enable Private Access to the Amazon EKS Kubernetes API with AWS PrivateLink
Introduction The adoption and large-scale growth of Kubernetes in recent years has resulted in businesses deploying multiple Amazon Elastic Kubernetes Service (Amazon EKS) clusters to support their growing number of microservice based applications. The Amazon EKS clusters are usually deployed in separate Amazon Virtual Private Clouds (Amazon VPCs) and often in separate AWS accounts. A […]
Securing API endpoints using Amazon API Gateway and Amazon VPC Lattice
Introduction In microservices architectures, teams often build and manage internal applications that they expose as private API endpoints and publicly expose those endpoints through a centralized API gateway where security protections are centrally managed. These API endpoints allow both internal and external users to leverage the functionality of those applications. The separation of concerns between […]
A deep dive into Amazon ECS task health and task replacement
Introduction Amazon Elastic Container Service (Amazon ECS) is a container orchestration service that manages the lifecycle of billions of application containers on AWS every week. One of the core goals of Amazon ECS is to remove overhead burden from human operators. Amazon ECS watches over your application containers 24/7, and can respond to unexpected changes […]
Building multi-tenant JupyterHub Platforms on Amazon EKS
Introduction In recent years, there’s been a remarkable surge in the adoption of Kubernetes for data analytics and machine learning (ML) workloads in the tech industry. This increase is underpinned by a growing recognition that Kubernetes offers a reliable and scalable infrastructure to handle these demanding computational workloads. Furthermore, a recent wave of Generative AI […]
Karpenter graduates to beta
Introduction Karpenter is a Kubernetes node lifecycle manager created by AWS, initially released in 2021 with the goal of minimizing cluster node configurations. Over the past year, it has seen tremendous growth, reaching over 4900 stars on GitHub and merged code from more than 200 contributors. It is in the process of being donated to […]
Secure containerized workloads on Amazon EKS and AWS Fargate with Aqua
Introduction Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate provides serverless compute for containerized workloads that run on Kubernetes. By eliminating the need for infrastructure management with AWS Fargate, customers can avoid the operational overhead of scaling, patching, and securing instances. AWS Fargate provides a secure and a controlled environment for container execution. Consequently, […]
Run time sensitive workloads on ECS Fargate with clock accuracy tracking
Introduction In part 1 and part 2 of this series, the importance of measuring time accuracy and relevant concepts were discussed. Additionally, we covered specifics on ways to put those concepts into practice, track metrics using Amazon CloudWatch and implement a practical solution for Amazon Elastic Compute Cloud (Amazon EC2) instances. In this part 3, […]
Lacework’s batch workloads on Amazon EKS: Lessons learned
This post was co-written with Derek Brown, Infrastructure Engineer, Lacework Introduction Lacework is a security platform that automatically monitors and detects misconfigurations and security vulnerabilities across our customers’ cloud environments. Lacework takes a data-driven approach to alerting and detection, consuming trillions of events from a huge list of sources including eBPF, Kubernetes Audit Logs, cloud […]