Containers

Olly Pomeroy

Author: Olly Pomeroy

Olly is a Senior Specialist Solution Architect at Amazon Web Services. He is part of the containers team working on Amazon ECS and AWS Fargate. Olly has a background in Linux containers and container runtimes.

Improving Amazon ECS deployment consistency with SOCI Index Manifest v2

Seekable OCI (SOCI) helps Amazon Elastic Container Service (Amazon ECS) customers reduce task launch times by starting containers before their images are fully downloaded. To ensure reliable deployments, Amazon ECS software version consistency ensures that the same container image is used throughout an ECS deployment. However, when running ECS tasks with SOCI, there was still […]

Building secure guardrails for Amazon ECS with AWS IAM and AWS CloudFormation Guard

This blog post was authored by Olly Pomeroy, Senior Container Specialist Solution Architect at AWS. As organizations grow, enforcing governance and securing workloads becomes increasingly complex. Security and platform teams face the challenge of implementing consistent security controls, enforcing defaults, and applying best practices without slowing down application teams. Organizations need a comprehensive approach to […]

Improving deployment visibility for Amazon ECS services

When deploying software, it’s critical to have visibility into all stages of the deployment process. Knowing the status of ongoing deployments, troubleshooting issues when things go wrong, and having an audit trail of past deployments are essential for ensuring a safe and reliable release process. Amazon Elastic Container Service (Amazon ECS) now provides enhanced observability […]

Migrating from AWS App Mesh to Amazon ECS Service Connect

After careful consideration, we have made the decision to discontinue AWS App Mesh, effective September 30th, 2026. Until this date, existing AWS App Mesh customers will be able to use the service as normal, including creating new resources and onboarding new accounts via the AWS CLI and AWS CloudFormation. Additionally, AWS will continue to provide […]

Improving operational visibility with AWS Fargate task retirement notifications

Introduction AWS Fargate, the serverless compute engine for containerized workloads, removes the undifferentiated heavy lifting of securing and patching the underlying infrastructure. In this blog post we dive into AWS Fargate task retirement, one of the ways AWS keeps the infrastructure secure and up to date. AWS has recently updated the AWS Fargate task retirement […]

Announcing additional Linux controls for Amazon ECS tasks on AWS Fargate

Introduction An Amazon Elastic Container Service (Amazon ECS) task is a number of co-located containers that are scheduled on to AWS Fargate or an Amazon EC2 container instance. Containers use Linux namespaces to provide workload isolation—and with namespaces—even though containers are scheduled together in an Amazon ECS task, they’re still isolated from each other and […]

Under the hood: Lazy Loading Container Images with Seekable OCI and AWS Fargate

November 2023: AWS Fargate now supports having both SOCI and non SOCI enabled containers in the same Amazon ECS task, therefore the “All container images within an Amazon ECS Task need a SOCI Index Manifest” restriction no longer applies. To learn more see the whats new post.   AWS Fargate, a serverless compute engine for […]

Reducing AWS Fargate Startup Times with zstd Compressed Container Images

Reducing AWS Fargate Startup Times with zstd Compressed Container Images

Updated Oct. 19, 2022: Amazon ECR’s Enhanced Scanning, powered by AWS Inspector, now supports scanning zstd compressed container images AWS Fargate is a serverless compute engine for containerized workloads running on Amazon Elastic Container Service (Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon EKS). Once a containerized workload has been scheduled by a container orchestrator, […]