Containers

Image

Easy as one-two-three policy management with Kyverno on Amazon EKS

This post is contributed by Raj Seshadri and Jimmy Ray As containers are used in cloud native production environments, DevOps and security teams need to gain real-time visibility into container activity, restrict container access to host and network resources, and detect and prevent exploits and attacks on running containers. Kyverno is a policy engine for […]

Read More
Image

Latest updates to AWS Fargate for Amazon ECS

Recently, we announced features to improve the configuration and metric gathering experience of your tasks deployed via AWS Fargate for Amazon ECS. Based off of customer feedback, we added the following features: Environment file support Deeper integration with AWS Secrets Manager using secret versions and JSON keys More granular network metrics, as well as additional […]

Read More
Image

Theoretical cost optimization by Amazon ECS launch type: Fargate vs EC2

This post was contributed by Julia Beck, Thomas Le Moullec, Kevin Polossat, and Sam Sanders Customers often ask about best practices when using Amazon Elastic Container Service (Amazon ECS), in particular around the Well-Architected Framework pillar of Cost Optimization. Within this, choosing between the two different launch types, EC2 and Fargate, may be one of […]

Read More
Image

Sending Envoy metrics from AWS App Mesh to Amazon CloudWatch

With AWS customers adopting AWS App Mesh with Amazon ECS and Amazon EKS, we have seen them with the following request on multiple occasions. This post will demonstrate the mechanism of getting metrics from Envoy to CloudWatch. “We have adopted AWS App Mesh as a service mesh solution for application-level networking for our micro services […]

Read More
Image

Leveraging App Mesh with Amazon EKS in a Multi-Account environment

Today, many customers are adopting microservices to develop software faster, enable innovation, and accelerate the time-to-market for new features and products. The microservices approach is the implementation of small independent pieces of software that address specific business needs and communicate over well-defined APIs. In order to implement this development model, larger organizations are changing the […]

Read More
ECR cross region replication use case

Cross region replication in Amazon ECR has landed

Michael Brown and Michael Hausenblas Replicating container images across regions in Amazon Elastic Container Registry (ECR) automatically has been one of the most asked features and we’re glad to be able to share the good news with you: it has landed. Where previously you had to implement the replication yourself you can now leave the […]

Read More
High level architecture

Ship and visualize your Istio virtual service traces with AWS X-Ray

AWS X-Ray is a managed distributed tracing system that helps customers gain end-to-end visibility of requests and provides rich visualization of connected services. This post will show how customers can integrate AWS X-Ray as a backend for Zipkin traces generated from services in a Istio service mesh.

Read More
Image

Operating a multi-regional stateless application using Amazon EKS

This post was contributed by Re Alvarez Parmar, Sr Solutions Architect, and Avi Harari, Technical Account Manager. One of the key benefits of operating on AWS is how easily customers can use AWS’s global footprint to run their workloads in multiple regions. Whether you need a multi-region architecture to support disaster recovery or bring your […]

Read More
Image

Automating Amazon EKS with GitOps

This post is contributed by Anita Buehrle, Director of Content at Weaveworks. Companies want to go fast; they need to deploy more often, more reliably, and preferably with less overhead. GitOps is a fast and secure method for developers to manage and update complex applications and infrastructure running in Kubernetes. GitOps is an operations and […]

Read More