Computing Flashcards
What are the 2 main AWS container orchestration services?
-AWS Elastic Constainer Service (ECS)
-AWS Elastic Kubernetes Service (EKS)
What are the 2 main compute options on AWS ECS?
-EC2 (Customer managed instances)
-Fargate (Serverless)
What is the AWS service used for storing, managing and deploying container images?
-Elastic Container Registry (ECR)
True or False: ECR is compatible with the Docker Registry HTTP API V2
True
True or False: It is not recommended to run LLM inference on ECS since it lacks GPU Support
False, ECS has GPU support since it can run on any EC2 instance type
Whats the main use case where EKS is the recommended container orchestration solution?
If the cliente already works with Kubernetes and has built it’s systems around it.
True or False: ECR can only replicate repositories within the same region
False, ECR can replicate repositories both to different regions and different accounts
What are the types of accepted ECR repositories?
Public and Private
ECR can be configured to perform security scans of it’s images on which situations?
On Push and, in the case of Enhanced Scanning, Continuous Scanning. Otherwise, scans have to be performed manually.
What are the types of image scanning allowed in ECR?
-Basic Scanning using Common Vulnerabilities and Exposures Databases (CVEs)
-Enhanced Scanning using Amazon Inspector
What kinds of vulnerabilities can ECR Enhanced Scanning detect that Basic Scanning can’t?
Enhanced Scanning can detect OS vulnerabilities and Programming Language vulnerabilities
True or False: The results of the ECR Image Scan ca trigger EventBridge
True
What does the placement engine on ECS do?
It determines which images will be spun in what hardware/instance.
True or False: You can specify placement constraints and task placement strategies as part of your overall scheduling strategy to customize how Amazon ECS places your tasks.
True
What are the ECS Task Placement Strategies?
-Binpack: Places new task in instance with least CPU or Memory available.
-Spread: Distributes new tasks evenly between instances.
-Random: Places new task in random instance.
What are advantages of each ECS task allocation strategy? (Binpack, spread, random)
-Binpack: Useful for running few instances.
-Spread: Good for high availability
-Random: No advantages.
What are the ECS Task Placement Constraints?
Affinity: Places new task on group with a specific atribute (AZ, instance type, etc)
DIstinct Instance: New tasks have to be placed on different container instance (only one container of that image per instance)
Whtas the use case difference between ECS Task Scheduler and ECS Service Scheduler?
Task Scheduler should be used to run on-demand workloads while Service Scheduler should be used to run continuous, long-running applications
True or False: Fargate works with both ECS and EKS
True
Whats the most common way to integrate Secret Manager and SSM with ECS?
Pass secrets and configurations as environment variables to the running docker container
What are the types of ECS task networking?
- none: No connectivity or port mappings
- bridge: Use Docker’s virtual container-based network
- host: bypass Docker and use the underlying host’s network interface
- awsvpc: every task launched gets own ENI and private IP. Default for Fargate.
The types of ECS auto-scaling are _______, based on the value of a pre-defined CloudWatch metric, ________, based on a specific CloudWatch alarm and ________, which happens periodically on a predetermined date/time
-Target Tracking
-Step Scaling
-Scheduled Scaling
True or False: Both Fargate and EC2 launch types on ECS can run in spot instances
True
True or False: An ECS cluster can either only have EC2 tasks or Fargate tasks, not both
False, a single ECS cluster can have tasks of any combination of launch types. A common use case is to have containers running on EC2 and to create more containers for dealing with spikes using Fargate, since they spin up faster