Containers

Policy-based countermeasures for Kubernetes – Part 1

Choosing the right policy-as-code solution This is Part 1 in a two part series where we discuss policy-as-code solutions. As more organizations adopt containerization as a delivery strategy, the need for automated security, compliance, and privacy controls that detect, prevent, reduce, and counteract known and unknown threats, has increased. Out of this increased need for […]

Preparing for Kubernetes API deprecations when going from 1.15 to 1.16

Note: The contents of this blog are no longer up to date as the referenced Amazon EKS Kubernetes version is no longer supported. Refer to the Amazon EKS Kubernetes versions AWS documentation for up to date information on supported Amazon EKS Kubernetes versions.   The way that Kubernetes evolves and introduces new features is via […]

How Vanguard uses AWS X-Ray and Amazon CloudWatch to improve observability for Amazon ECS cloud applications

This post was contributed by Jeffrey Emberger, Technical Lead, The Vanguard Group and John Formento, Solutions Architect, AWS. Cloud applications are changing the speed at which companies can deliver new capabilities for their customers. With increased speed comes the need to more quickly, reliably, and inexpensively observe cloud application health. Observability is no longer an […]

Utilizing NVIDIA Multi-Instance GPU (MIG) in Amazon EC2 P4d Instances on Amazon Elastic Kubernetes Service (EKS)

In November 2020, AWS released the Amazon EC2 P4d instances. The Amazon EC2 P4d instances deliver the highest performance for machine learning (ML) training and high performance computing (HPC) applications in the cloud. This instance comes with the following characteristics: Eight NVIDIA A100 Tensor core GPUs 96 vCPUs 1 TB of RAM 400 Gbps Elastic […]

What’s new with Red Hat OpenShift Service on AWS

Customers have been able to deploy application workloads within Red Hat OpenShift on AWS for several years. AWS and Red Hat have continued to respond to customer feedback and reduce effort and help customers meet the agility requirements they desire. Modernization does not stop at the evolution of applications, but touches on every aspect of […]

Setting up end-to-end TLS encryption on Amazon EKS with the new AWS Load Balancer Controller

In this blog post, I’ll show you how to set up end-to-end encryption on Amazon Elastic Kubernetes Service(Amazon EKS). End-to-end encryption in this case refers to traffic that originates from your client and terminates at an NGINX server running inside a sample app. I work with regulated customers who need to satisfy regulatory requirements like […]

Introducing Amazon EFS CSI dynamic provisioning

As companies move more of their workloads to Kubernetes, they are increasingly deploying applications that need a way to share or persist data or state outside the container. Kubernetes addresses this need by exposing block and file storage systems to containerized workloads via the Container Storage Interface (CSI). Amazon Elastic Kubernetes Service (Amazon EKS) currently […]

Advertising click-prediction modeling on Amazon EKS

In digital advertising, the ad click-through rate (CTR) model predicts the probability of a click given the ads and context x (for example, shopping query, time of the day, device). The output of a CTR model can be seen as a conditional probability p(y = click|x). A precise estimation of this probability influences our ability […]

Graceful shutdowns with ECS

Introduction Amazon Elastic Container Service (Amazon ECS) gives customers the flexibility to scale their containerized deployments in a variety of different ways. Tasks can be scaled-out to react to an influx of requests or they can be scaled-in to reduce cost. ECS also supports different deployment options, including rolling deployments, blue/green deployments, and canary-style deployments. […]

Amazon ECS-optimized Amazon Linux AMI End-of-Life

Update April 16, 2021 – The Amazon ECS-optimized Amazon Linux AMI ended its standard support on April 15, 2021 and has entered a maintenance support phase. Since its launch in 2015, the Amazon ECS-optimized Amazon Linux AMI has helped a number of customers build containerized Linux-based applications on Amazon Elastic Compute Cloud (EC2). The AMI […]