Containers

Tag: AWS CodeBuild

Using SBOM to find vulnerable container images running on Amazon EKS clusters

Introduction When you purchase a packaged food item in your local grocery store, you probably check the list of ingredients written to understand what’s inside and make sure you aren’t consuming ingredients inadvertently that you don’t want to or are known to have adverse health effects. Do you think in a similar way when you […]

How RGC Genetics Center achieved infrastructure automation at scale using AWS Proton

This post was co-written with Rouel Lanche, Associate Director IT Architect, Regeneron Introduction Regeneron is a leading biotechnology company that invents, develops, and commercializes life-transforming medicines for people with serious diseases. Founded and led for 35 years by physician-scientists, Regeneron’s unique ability to repeatedly and consistently translate science into medicine has led to numerous FDA-approved […]

Shift left to secure your container supply chain

Introduction When we talk about securing container solutions, most of the focus is on securing the orchestrator or the infrastructure that the orchestrator runs on. However, at the heart of your container solutions are the containers themselves. In this post, we show you how we ensured that before we even push a container into our […]

Scaling IaC and CI/CD pipelines with Terraform, GitHub Actions, and AWS Proton

Introduction Modern applications run on a variety of compute platforms in AWS including serverless services such as AWS Lambda, AWS App Runner, and AWS Fargate. Organizations today are often required to support architectures using a variety of these AWS services, each offering unique runtime characteristics, such as concurrency and scaling, which can be purpose fit […]

Accelerating Development Velocity with AWS App Runner and Cloud Native Buildpacks

Introduction In May 2021 we introduced AWS App Runner, the simplest way to build and run your containerized web application in AWS. AWS App Runner gives you a fully managed container-native service. There are no orchestrators to configure, build pipelines to set up, load balancers to optimize, or Transport Layer Security (TLS) certificates to rotate. […]

Announcing AWS CDK Support and CodeBuild Provisioning for AWS Proton

Announcing AWS CDK Support and CodeBuild Provisioning for AWS Proton

Introduction Today, AWS Proton announced CodeBuild provisioning, which allows customers to define a series of commands to determine how Infrastructure as Code (IaC) templates get deployed via AWS Proton. With CodeBuild provisioning, customers can use the IaC tool of their choice, such as the AWS Cloud Development Kit (AWS CDK) when defining templates. Previous to […]

Example Builder concepts

Creating container images with Cloud Native Buildpacks using AWS CodeBuild and AWS CodePipeline

Organizations using Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), or other container orchestrators all face the same hurdle to getting up and running quickly: how do teams effectively package their application source code in a container image with speed and efficiency? This journey from “source to image” can challenge organizations […]

Gif that shows canary deployment taking place

Create a pipeline with canary deployments for Amazon EKS with AWS App Mesh

In this post, we will demonstrate how customers can leverage different AWS services in conjunction with AWS App Mesh to implement a canary deployment strategy for applications running on Amazon Elastic Kubernetes Service (Amazon EKS). As stated in the post “Getting started with App Mesh and EKS”, many customers are currently implementing microservices in a […]

CI/CD pipeline for testing containers on AWS Fargate with scaling to zero

Development teams are running manual and automated tests several times a day for their feature branches. Running tests locally is only one part of the process. To test workloads against other systems as well as give access to QA engineers, it requires deploying code to dedicated environments. These servers/VMs spend hours idling because new test […]