• Contents:

💡 Only covering stuff that wasn't covered in SAA-C03

Amazon ECS

Intro to ECS from SAA-C03 Notes

Amazon ECS (Elastic Container Service) 101

ECS - Additional Details

Ref: https://www.udemy.com/course/aws-certified-machine-learning-engineer-associate-mla-c01/learn/lecture/45356913

• If launching ECS with EC2 mode, each EC2 instance will be running an ECS Agent to register the ECS cluster
  • Diagram
• IAM Roles
  • EC2 Instance Profile (Only for ECS-EC2 mode)
    • Role assumed by the ECS Agent inside the EC2 instance
    • Needs permissions to: make API calls to ECS, send container logs to CWLogs, pull images from ECR, reference sensitive data in Secrets Manager/SSM Parameter Store
  • ECS Task Roles
    • Role assumed by a task
    • Must grant permissions that task needs
    • Defined in task definition
  • Diagram
• ELB integrations
  • ALB: use for most cases
  • NLB: use only for high throughput/performance, or to pair with AWS Private Link
  • CLB: NOT recommended (no advanced features, no Fargate support)
• Data Volumes → EFS support for both EC2 & Fargate
  • EFS allows sharing data cross-AZ between tasks → persistent multi-AZ shared storage for containers
  • Fargate + EFS → ultimate serverless combo
• CloudWatch Container Insights → container logs and metrics (for both ECS and EKS)

Amazon EKS

Intro to EKS from SAA-C03 Notes

Amazon EKS (Elastic Kubernetes Service) 101

EKS - Additional Details

Ref: https://www.udemy.com/course/aws-certified-machine-learning-engineer-associate-mla-c01/learn/lecture/45356923

• Data Volumes → need to specify StorageClass manifest in EKS cluster