Miscellaneous

Question 1

What are EKS Topology spread constraints

Answer 1

Topology spread constraints define how pods are distributed across Availability zones, for the purpose of resilience.

Question 2

According to AWS best practices, should ECS Task IAM roles or ECS Container IAM roles be used? Why?

Answer 2

Best Practice: Use ECS Task IAM roles rather than ECS Container IAM roles.

Why:

Granular permissions: ECS Task IAM roles provide more fine-grained permissions, allowing you to assign different roles to individual tasks within a service. This minimizes the risk of over-permissioning.
Security: ECS Task IAM roles follow the principle of least privilege, ensuring that each task only has access to the AWS resources it needs.
Isolation: Permissions are isolated per task, preventing tasks from interfering with or accessing resources needed by other tasks.

Question 3

What software is best for customer managed encryption keys?

Answer 3

CloudHSM