Containers

Category: Expert (400)

Migrate existing HAQM ECS services from service discovery to HAQM ECS Service Connect

At re:Invent in November 2022 we announced a new HAQM Elastic Container Service (HAQM ECS) solution for service-to-service communication called HAQM ECS Service Connect. HAQM ECS Service Connect enables easy communication between microservices and across HAQM Virtual Private Clouds (HAQM VPCs) by leveraging AWS Cloud Map namespaces and logical service names. This allows you to […]

EKS Persistent Volumes for Instance Store

The Kubernetes project is made up of a number of special interest groups (SIGs) that focus on a particular part of the Kubernetes ecosystem. The Storage SIG is focused on different types of storage (block and file) and ensuring that storage is available to containers when they are scheduled. One of the subprojects of the Storage […]

Continuous Delivery of HAQM EKS Clusters Using AWS CDK and CDK Pipelines

This blog is no longer up to date and we recommend reviewing the HAQM EKS Blueprints for CDK Pipeline SDK module which makes it easier to create infrastructure Continuous Delivery pipelines via AWS CodePipeline. Customers are looking for ways to automate the deployment of their HAQM EKS clusters across different versions, environments, accounts, and Regions. […]

HAQM ECS on AWS Outposts

AWS Outposts is a fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any data center, co-location space, or on-premises facility, in the form of a physical rack connected to the AWS global network. AWS compute, storage, database, and other services run locally on Outposts, and you can […]

GitOps model for provisioning and bootstrapping HAQM EKS clusters using Crossplane and Flux

In an earlier blog (Part 1 of the series), I discussed the adoption of the GitOps model as an efficient strategy for provisioning cloud provider-specific managed resources, such as, for example, HAQM S3 bucket and HAQM RDS instance, that application workloads depend on. The blog presented the details of implementing a use case where an HAQM […]

Introducing OIDC identity provider authentication for HAQM EKS

Today, we introduced user authentication for HAQM EKS clusters from an OpenID Connect (OIDC) Identity Provider (IDP). This feature allows customers to integrate an OIDC identity provider with a new or existing HAQM EKS cluster running Kubernetes version 1.16 or later. The OIDC IDP can be used as an alternative to, or along with AWS […]

Enable traffic encryption between services in AWS App Mesh using AWS Certificate Manager or customer-provided certificates

NOTICE: October 04, 2024 – This post no longer reflects the best guidance for configuring a service mesh with HAQM ECS and HAQM EKS, and its examples no longer work as shown. For workloads running on HAQM ECS, please refer to newer content on HAQM ECS Service Connect, and for workloads running on HAQM EKS, […]

AWS CodeDeploy now supports linear and canary deployments for HAQM ECS

AWS CodeDeploy has extended blue/green deployment support for Elastic Container Service (HAQM ECS) to include canary and linear deployments for applications hosted on AWS Fargate or HAQM Compute Cloud (HAQM EC2). Blue/green deployments are a safe deployment strategy provided by AWS CodeDeploy for minimizing interruptions caused by changing application versions. This is accomplished by creating […]

Scanning images with Trivy in an AWS CodePipeline

This post was contributed by AWS Container Hero, Liz Rice, VP Open Source Engineering at Aqua Security. If you’re working with containers, it’s important to scan your images for known vulnerabilities, so that you don’t deploy code that an attacker can easily exploit. A good way of ensuring that all your deployed images get this […]

Cross HAQM EKS cluster App Mesh using AWS Cloud Map

NOTICE: October 04, 2024 – This post no longer reflects the best guidance for configuring a service mesh with HAQM EKS and its examples no longer work as shown. Please refer to newer content on HAQM VPC Lattice. ——– Overview In this article, we are going to explore how to use AWS App Mesh across […]