[03] Architecting for ECS Flashcards
What is the dualStackIPv6 parameter used for?
It allows awsvpc tasks to be provided an IPv6 address in addition to the primary private IPv4 address
What are the requirements for a task to receive an IPv6 address?
The task must use awsvpc network mode, be launched in a VPC configured for dual-stack mode, and the dualStackIPv6 account setting must be enabled
What is the fargateFIPSMode parameter used for?
It turns on FIPS-140 compliance for Fargate tasks
What does the tagResourceAuthorization parameter enforce?
It enforces the ecs:TagResource permission when calling ECS API actions which create resources with tags e.g. ECS:CreateCluster
What is the purpose of the fargateTaskRetirementWaitPeriod parameter?
It controls the notice period for non-critical Fargate platform revision updates
What does the guardDutyActivate parameter indicate?
It is a read-only setting which indicates whether GuardDuty Runtime Monitoring is enabled
What accounts are opted in to using the new ARN formats by default?
New accounts are opted in by default
What parameters can be used to opt-in to using the new ARN formats?
serviceLongArnFormat, taskLongArnFormat & containerInstanceLongArnFormat
What does the awsvpcTrunking parameter enable?
It enables ENI trunking for certain EC2 instance types
What does the containerInsights parameter determine?
It determines whether Container Insights is enabled by default for new clusters
Can the containerInsights setting be overridden for a specific cluster?
Yes, it can be overridden in ecs:CreateCluster
What options are available for latency critical applications with ECS?
Local Zones, Wavelength Zones, AWS Outposts
What are Local Zones?
An extension of an AWS region
What are Wavelength Zones?
Colocated with infrastructure used for carriers’ 5G networks
What is AWS Outposts?
Allows AWS infrastructure to be deployed on premises
What is a limitation of Local Zones, Wavelength Zones, and AWS Outposts?
Other AWS services are limited in these environments e.g. only some Local Zones support ALBs
Where does the ECS control plane run for Local Zones, Wavelength Zones, and AWS Outposts?
In the region
What is the recommended agent configuration setting when running the agent outside a region?
ECS_IMAGE_PULL_BEHAVIOR=prefer-cached
What is the default setting for the ECS_IMAGE_PULL_BEHAVIOR agent configuration?
Not prefer-cached
What are shared subnets supported for?
EC2 and Fargate tasks
What security group restriction applies when using shared subnets?
The security group(s) used must belong to the current account
For Fargate tasks, what conditions allow tasks to have public IPs?
The network mode is awsvpc, the assignPublicIP is ENABLED in the service definition, and the subnet supports it
For EC2 tasks, what network modes allow tasks to have public IPs?
bridge or host
What other condition is required for EC2 tasks to have public IPs?
The EC2 container instance has a public IP
