Containers
Category: Amazon Elastic Kubernetes Service
Designing a secure container image registry
As organizations move to containers, there can be a sense that they are losing control or visibility of the software that is deployed to their environments. Historically, once a server is in production, a scanning tool runs on a regular basis to detect vulnerabilities on the operating system. Once a vulnerability is detected, an operations […]
Using Gatekeeper as a drop-in Pod Security Policy replacement in Amazon EKS
Jason Umiker If you are managing a Kubernetes cluster or you are a security professional responsible for one then you likely have heard that you should be implementing Kubernetes Pod Security Policies (PSPs) on the cluster in order to improve your security posture. Using PSPs can help to block pods from being disruptive to their […]
Securing Kubernetes applications with AWS App Mesh and cert-manager
NOTICE: October 04, 2024 – This post no longer reflects the best guidance for configuring a service mesh with Amazon EKS and its examples no longer work as shown. Please refer to newer content on Amazon VPC Lattice. ——– Updated Sept. 24, 2021 – This post has been amended to include a newly available option […]
Introducing security groups for pods
Security groups, acting as instance level network firewalls, are among the most important and commonly used building blocks in any AWS cloud deployment. It came as no surprise to us that integrating security groups with Kubernetes pods emerged as one of the most highly requested Amazon Elastic Kubernetes Service (Amazon EKS) features, as seen on […]
Creating Kubernetes Auto Scaling Groups for Multiple Availability Zones
Kubernetes is a scalable container orchestrator that helps you build fault-tolerant, cloud native applications. It can handle automatic container placement, scale up and down, and provision resources for your containers to run. While Kubernetes can take care of many things, it can’t solve problems it doesn’t know about. Usually these are called unknown unknowns and […]
ICYMI: AWS Cloud Containers Conference
On July 9th, the AWS Containers team hosted the first AWS Cloud Containers Conference (C3). The full day, virtual conference covered deep dives, launches, and demos on Amazon EKS, Amazon ECS, AWS Fargate, Amazon ECR, and AWS App Mesh. As well as, a keynote from GM of Kubernetes, Bob Wise, and closing remarks from Chief […]
Introducing the AWS Controllers for Kubernetes (ACK)
AWS Controllers for Kubernetes (ACK) is a new tool that lets you directly manage AWS services from Kubernetes. ACK makes it simple to build scalable and highly-available Kubernetes applications that utilize AWS services. Today, ACK is available as a developer preview on GitHub. In this post we will give you a brief introduction to the […]
Amazon EKS on AWS Graviton2 generally available: considerations on multi-architecture apps
Today, Amazon EKS on AWS Graviton2 is generally available and with this post we want to give you some background on what this means for you and how it works in practice. We had first-generation AWS Graviton from early 2019 on in preview and many of you participated in the AWS Graviton2 preview program launched […]
Introducing launch template and custom AMI support in Amazon EKS Managed Node Groups
Amazon Elastic Kubernetes Service (EKS) now supports EC2 Launch Templates and custom AMIs for managed node groups. When combined, these new features provide flexible configuration and customization options for Amazon EC2 instances which are managed as Kubernetes nodes by EKS. This enables you to leverage the simplicity of managed node provisioning and lifecycle management features […]
Saving money a pod at a time with EKS, Fargate, and AWS Compute Savings Plans
At re:Invent 2019, we announced the ability to deploy Kubernetes pods on AWS Fargate via Amazon Elastic Kubernetes Service (Amazon EKS). Since then we’ve seen customers rapidly adopt the Kubernetes API to deploy pods onto Fargate, the AWS serverless infrastructure for running containers. This allows them to get rid of a lot of the undifferentiated […]