[02] Fargate Flashcards
What load balancers are supported for Fargate tasks?
ALB or NLB
What target type is used to registering Fargate tasks to a target group?
ip
What is required for UDP traffic on Fargate?
An NLB and Fargate platform version 1.4 or later
What is the recommended way to track Fargate usage against service quotas?
Fargate usage metrics published as CloudWatch metrics under the AWS/Usage namespace
What Linux parameter is supported on Fargate?
SYS_PTRACE
What features are not supported for Windows containers on Fargate?
gMSA (Group Managed Service Accounts) and Amazon FSx
How can resource limits be configured on Linux containers in Fargate?
Using ulimits
What is the isolation boundary for each Fargate task?
Each Fargate task has its own isolation boundary and does not share the underlying kernel, CPU resources, memory resources, or elastic network interfaces with another task
What is the networking mode is supported by Fargate?
awsvpc
Which role is required for Fargate tasks?
The task execution role
What is the default task execution role created by the console?
ecsTaskExecutionRole with the policy AmazonECSTaskExecutionRolePolicy
What type of tasks are run at a discounted rate by Fargate?
Spot tasks, which are used for interruption-tolerant tasks
What warning do interruption-tolerant tasks receive before being stopped?
A two-minute warning
What infrastructure configuration does Fargate Spot support?
Linux for the OS and X86_64 for the architecture
What is used when LATEST is specified for the platform version?
The latest revision of the platform version
How are Windows and Linux platform versions released and numbered?
Windows and Linux platform versions are released and numbered independently
What container runtime does Fargate for Linux use as of platform version 1.4.0?
containerd
What architectures does Windows Fargate support?
X86_64 only
What do Windows Server container images need to be created for?
A specific version of Windows Server e.g. Windows Server 2022 Core
What field in the service definition specifies the Windows Server version for Fargate?
platformFamily
What field in the task definition must match the platformFamily in the service definition?
operatingSystemPlatform
How much ephemeral storage do Fargate tasks receive by default?
20 GiB
What is the maximum amount of ephemeral storage that can be configured for a Fargate task?
200 GiB
How is ephemeral storage configured for a Fargate task?
By setting the ephemeralStorage task definition parameter
What is ephemeral storage used for in Fargate tasks?
To pull images, and can be used by the task for other purposes using a bind mount
What is cached by Fargate to speed up image pulls for Windows images?
The base layers for Windows versions released in the last month
What happens during task retirement?
For service tasks, no action is required as the tasks are replaced while respecting the minimum and maximum healthy percent configured for the service. Standalone tasks are stopped on the task retirement date and are not replaced.
How is the reason for tasks stopping due to retirement communicated?
The stoppedReason
field in the DescribeTasks
API response will be ECS is performing maintenance on the underlying infrastructure hosting the task
How are notifications sent for tasks scheduled to be retired?
A notice is sent via email and as an AWS Health notification
Where do AWS Health notifications appear?
AWS Health notifications appear in the Personal Health Dashboard (PHD)
What account setting controls the notice period for task retirements?
The fargateTaskRetirementWaitPeriod
account setting
What are the supported values for the fargateTaskRetirementWaitPeriod
setting?
The supported values are 0
, 7
& 14
days. The default value is 7
days
Is the fargateTaskRetirementWaitPeriod
setting applied for critical security updates?
This setting is ignored for critical security updates which occur immediately after the notification
What are the two phases of platform version deprecation?
The force update date then the deprecation date
What happens on the force update date?
On the force update date, a force deployment is performed on services using LATEST
as the platform version. Services using a specific platform version, and standalone tasks, are not affected
What happens on the deprecation date?
On the deprecation date, new tasks will no longer be able to launch using that platform version. Standalone tasks, and tasks in a service explicitly using the older platform version, will continue running