Computing Flashcards
What are the 2 main AWS container orchestration services?
-AWS Elastic Constainer Service (ECS)
-AWS Elastic Kubernetes Service (EKS)
What are the 2 main compute options on AWS ECS?
-EC2 (Customer managed instances)
-Fargate (Serverless)
What is the AWS service used for storing, managing and deploying container images?
-Elastic Container Registry (ECR)
True or False: ECR is compatible with the Docker Registry HTTP API V2
True
True or False: It is not recommended to run LLM inference on ECS since it lacks GPU Support
False, ECS has GPU support since it can run on any EC2 instance type
Whats the main use case where EKS is the recommended container orchestration solution?
If the cliente already works with Kubernetes and has built it’s systems around it.
True or False: ECR can only replicate repositories within the same region
False, ECR can replicate repositories both to different regions and different accounts
What are the types of accepted ECR repositories?
Public and Private
ECR can be configured to perform security scans of it’s images on which situations?
On Push and, in the case of Enhanced Scanning, Continuous Scanning. Otherwise, scans have to be performed manually.
What are the types of image scanning allowed in ECR?
-Basic Scanning using Common Vulnerabilities and Exposures Databases (CVEs)
-Enhanced Scanning using Amazon Inspector
What kinds of vulnerabilities can ECR Enhanced Scanning detect that Basic Scanning can’t?
Enhanced Scanning can detect OS vulnerabilities and Programming Language vulnerabilities
True or False: The results of the ECR Image Scan ca trigger EventBridge
True
What does the placement engine on ECS do?
It determines which images will be spun in what hardware/instance.
True or False: You can specify placement constraints and task placement strategies as part of your overall scheduling strategy to customize how Amazon ECS places your tasks.
True
What are the ECS Task Placement Strategies?
-Binpack: Places new task in instance with least CPU or Memory available.
-Spread: Distributes new tasks evenly between instances.
-Random: Places new task in random instance.
What are advantages of each ECS task allocation strategy? (Binpack, spread, random)
-Binpack: Useful for running few instances.
-Spread: Good for high availability
-Random: No advantages.
What are the ECS Task Placement Constraints?
Affinity: Places new task on group with a specific atribute (AZ, instance type, etc)
DIstinct Instance: New tasks have to be placed on different container instance (only one container of that image per instance)
Whtas the use case difference between ECS Task Scheduler and ECS Service Scheduler?
Task Scheduler should be used to run on-demand workloads while Service Scheduler should be used to run continuous, long-running applications
True or False: Fargate works with both ECS and EKS
True
Whats the most common way to integrate Secret Manager and SSM with ECS?
Pass secrets and configurations as environment variables to the running docker container
What are the types of ECS task networking?
- none: No connectivity or port mappings
- bridge: Use Docker’s virtual container-based network
- host: bypass Docker and use the underlying host’s network interface
- awsvpc: every task launched gets own ENI and private IP. Default for Fargate.
The types of ECS auto-scaling are _______, based on the value of a pre-defined CloudWatch metric, ________, based on a specific CloudWatch alarm and ________, which happens periodically on a predetermined date/time
-Target Tracking
-Step Scaling
-Scheduled Scaling
True or False: Both Fargate and EC2 launch types on ECS can run in spot instances
True
True or False: An ECS cluster can either only have EC2 tasks or Fargate tasks, not both
False, a single ECS cluster can have tasks of any combination of launch types. A common use case is to have containers running on EC2 and to create more containers for dealing with spikes using Fargate, since they spin up faster
True or false: An ECS task definition is immutable
True
What is a Fargate platform version?
It is a specific runtime environment to be used on the execution of the ECS task, which includes the operating system kernel version and container runtime (Docker daemon) versions.
What are the 3 permission types Fargate receives from IAM?
-Cluster permissions
-Application permissions
-Task housekeeping permissions
What do Fargate cluster permissions govern?
Who can start, stop and describe tasks in a cluster. They work at a cluster level.
What do Fargate application permissions govern?
The permissions the containers executing the ECS task possess to access other AWS resources
What do Fargate task housekeeping permissions govern?
The permissions needed to perform housekeeping activities around a task, such as registering targets on the ELB, accessing ECR for the container image, etc.
True or False: Fargate ephemeral storage is based on EFS
False, it is based on EBS
How much space does each Fargate task receive for ephemeral storage?
10GB plus 4 GB of shared space for sharing data between containers.
If I Have 5 container inside a single Fargate task, how much ephemeral space will each of them have access to?
2GB (10GB /5) plus the 4 GB of shared space.
What is Kubernetes?
Kubernetes is an Open-Source solution for the management, deployment and caling of containerized aplications
True or False: Kubernets employs a master-worker architecture
True
What are the EKS node types?
-Managed Node Groups
-Self-Managed Nodes
-AWS Fargate (No management or nodes required)
What are the difference between EKS Managed Node Groups and Self-Managed Nodes?
Managed Node Groups create and manage nodes (EC2 instances) for you. These nodes are part of an ASG managed by EKS. Self-Managed Nodes are nodes created by you and registered to the EKS cluster and managed by an ASG.
True or False: Both EKS Managed Node Groups and Self-Managed Nodes support both on-demand and spot EC2 instances
True
What are the types of storage accepted by EKS?
-EBS
-EFS
-FSx for Lustre
-FSx for NetApp ONTAP
What is an ecs cluster?
Its a logical grouping of services and tasks
True ro False: When running an ECS cluster on EC2 you pay for the EC2 instances running plus the cluster manager running on ECS
False
What are the types of storage usable by ECS?
-EBS Volume
-EFS File System
-Amazon ECS Ephemeral Instance Store
What are the main existing EC2 instance types?
-R
-C
-M
-I
-G
What is the specialty of the EC2 R instance type?
It’s an instance with more RAM
What is the specialty of the EC2 C instance type?
It’s an instance with more computing power
What is the specialty of the EC2 M instance type?
It’s an instance type that’s balanced
What is the specialty of the EC2 I instance type?
It’s an instance type with more local I/O capacity
What is the specialty of the EC2 G instance type?
It’s an instance type with GPU