Containers
Tag: open source
Validating Amazon EKS optimized Bottlerocket AMI against the CIS Benchmark
Introduction As Kubernetes adoption grows, many organizations are choosing it as their platform to build and host their modern and secure applications. Security is one of the primary design criteria for many workloads, especially those dealing with sensitive data such as financial data processing. These workloads have a stringent requirement to adhere to various security […]
Preventing Kubernetes misconfigurations using Datree
David Feldstein, Sr. Containers Specialist AWS co-authored with Shimon Tolts, AWS Community Hero, CEO & Co-founder Datree.io Introduction Kubernetes has taken the world by storm, according to the Cloud Native Computing Foundation’s (CNCF) Annual Survey of 2021, with 96% of organizations as either using or evaluating Kubernetes. Kubernetes is a production-grade container orchestration platform that […]
Announcing general availability of cdk8s+ and support for manifest validation
This post was co-written by Shimon Tolts, CEO and Co-Founder, Datree. Introduction On July of 2020, we introduced the beta version of cdk8s+, a high-level intent driven application programming interface (API) designed to simplify Kubernetes resource configuration. Since its release, we’ve been working on adding capabilities and collecting feedback from our customers. Today, we’re happy […]
AWS at KubeCon + CloudNativeCon North America 2022
Click here for the full schedule of AWS events at KubeCon + CloudNativeCon North America 2022 Amazon Web Services (AWS) is headed to Detroit, Michigan for KubeCon + CloudNativeCon North America 2022. We are thrilled to connect with the Open Source community in person to share what we’ve been working on, and learn about how […]
Policy management in Amazon EKS using jsPolicy
Introduction jsPolicy is an open-source framework for managing validating or mutating admission control policies for Amazon Elastic Kubernetes Service (Amazon EKS) clusters using JavaScript (or TypeScript), which is similar to the way AWS Identity and Access Management (IAM) manages AWS accounts and resource access. It’s also possible to write the entire jsPolicy in a separate file and […]
Introducing bare metal deployments for Amazon EKS Anywhere
Introduction At one time, all servers were bare metal servers. We have come a long way with virtualization, cloud computing, and more recently with containers and serverless technologies. Despite these innovations, bare metal servers remain popular on premises. Customers run applications on bare metal infrastructure for performance benefits, to gain direct access to underlying hardware […]
Provisioning infrastructure using the AWS Proton open-source Backstage plugin
Introduction The concept of the Internal Developer Platform (IDP) is becoming increasingly popular as it’s an innovative way for organizations to boost development velocity and reduce time to market. The IDP provides a set of shared capabilities that provide a standardized way for development teams to deploy applications to production. It is common for these […]
Tracing an AWS App Runner service using AWS X-Ray with OpenTelemetry
Introduction AWS App Runner is a fully managed service that developers can use to quickly deploy containerized web applications and APIs at scale with little to no infrastructure experience. You can start with source code or a container image. App Runner will fully manage all infrastructure, including servers, networking, and load balancing, for your application. App […]
Creating custom Amazon Machine Images with the ECS-optimized AMI Build Recipes
Customers running their container workloads on Amazon Elastic Container Service (Amazon ECS) have a choice of AWS Fargate and also using Elastic Compute Cloud (EC2) instances with the Amazon ECS-optimized AMI. One of the requests (issue #176) that our customers submitted, was to allow them to create their own ECS Amazon Machine Image (AMI). Today […]
A deep dive into Bottlerocket ECS Updater
Last month, we announced the general availability of the Amazon Elastic Container Service (Amazon ECS) optimized Bottlerocket AMI. Today, I would like to focus on the Bottlerocket ECS Updater. The ECS Updater is a service you can install into your ECS cluster that helps you keep your Bottlerocket container instances up to date. Before I […]