AWS In Practice
Courses
  • Welcome to AWS In Practice by IT Assist Labs!
  • Courses
    • AWS Powered E-commerce Application: A Guided Tour
      • Lesson Learning Paths
        • Lesson Learning Paths - Certification Prep
        • Lesson Learning Paths - Interview Prep
      • Lesson Summaries
        • Introduction
          • E-commerce Application Architecture
        • Multi-Account Strategy
          • Multi-Account Strategy Overview
          • Organization Units
          • Core Accounts
        • Core Microservices
          • Services Overview
          • AWS Well-Architected design framework application
          • Site Reliability Engineering Application
          • DevOps Application
          • Monitoring, Logging and Observability Application
        • AWS Service By Layer
          • AWS Service By Layer Overview
          • Presentation Layer
          • Business Logic Layer
          • Data Layer
        • E-commerce Application Use Cases
          • E-commerce Application Use Cases
          • Roles
      • Lesson Content Navigation Demonstration
    • Explore a Live AWS Environment Powering an E-commerce Application
  • Resources
    • AWS Certification Guide
      • Concepts
        • Security, Identity & Compliance
          • AWS IAM-Related Concepts in Certification Exams
        • Design High-Performing Architectures
          • Designing a high-performing architecture with EC2 and Auto Scaling Groups (ASGs)
    • Insights
      • Zero Trust Architecture (ZTA)
      • Implementing a Zero Trust Architecture(ZTA) with AWS
      • The Modern Application Development Lifecycle - Blue/Green Deployments
      • Microservices Communication Patterns
    • Interview Preparation
      • AWS Solutions Archictect
  • AWS Exploration
    • Use Cases
      • Multi-Region Resiliency with Active-Active Setup
        • Exploration Summary
    • Foundational Solutions Architect Use Cases
    • Security Engineer / Cloud Security Architect Use Cases
    • DevOps / Site Reliability Engineer (SRE) Use Cases
    • Cloud Engineer / Cloud Developer
    • Data Engineer Use Cases
    • Machine Learning Engineer / AI Practitioner Use Cases
    • Network Engineer (Cloud) Use Cases
    • Cost Optimization / FinOps Practitioner Use Cases
    • IT Operations / Systems Administrator Use Cases
  • Study Group
    • AWS Certified Solutions Architect - Associate
      • Study Guide Introduction
      • Domain 1: Design Secure Architectures
        • Task Statement 1.1: Design secure access to AWS resources
          • SecureCart's Journey
          • AWS Identity & Access Management (IAM) Fundamentals
          • AWS Security Token Service (STS)
          • AWS Organization
          • IAM Identity Center
          • AWS Policies
          • Federated Access
          • Directory Service
          • Managing Access Across Multiple Accounts
          • Authorization Models in IAM
          • AWS Control Tower
          • AWS Service Control Policies (SCPs)
          • Use Cases
            • Using IAM Policies and Tags for Access Control in AWS
        • Task Statement 1.2: Design Secure Workloads and Applications
          • SecureCart Journey
          • Application Configuration & Credential Security
          • Copy of Application Configuration & Credential Security
          • Network Segmentation Strategies & Traffic Control
          • Securing Network Traffic & AWS Service Endpoints
          • Protecting Applications from External Threats
          • Securing External Network Connections
          • AWS Network Firewall
          • AWS Firewall Manager
          • IAM Authentication Works with Databases
          • AWS WAF (Web Application Firewall)
          • Use Cases
            • AWS Endpoint Policy for Trusted S3 Buckets
            • Increasing Fault Tolerance for AWS Direct Connect in SecureCart’s Multi-VPC Network
            • Securing Multi-Domain SSL with ALB in SecureCart Using SNI-Based SSL
            • Configuring a Custom Domain Name for API Gateway with AWS Certificate Manager and Route 53
            • Application Load Balancer (ALB) – Redirecting HTTP to HTTPS
            • Security Considerations in ALB Logging & Monitoring
          • Amazon CloudFront and Different Origin Use Cases
          • Security Group
          • CloudFront
          • NACL
          • Amazon Cognito
          • VPC Endpoint
        • Task Statement 1.3: Determine appropriate data security controls
          • SecureCart Journey
          • Data Access & Governance
          • Data Encryption & Key Management
          • Data Retention, Classification & Compliance
          • Data Backup, Replication & Recovery
          • Managing Data Lifecycle & Protection Policies
          • KMS
          • S3 Security Measures
          • KMS Use Cases
          • Use Cases
            • Safely Storing Sensitive Data on EBS and S3
            • Managing Compliance & Security with AWS Config
            • Preventing Sensitive Data Exposure in Amazon S3
            • Encrypting EBS Volumes for HIPAA Compliance
            • EBS Encryption Behavior
            • Using EBS Volume While Snapshot is in Progress
          • Compliance
          • Implementing Access Policies for Encryption Keys
          • Rotating Encryption Keys and Renewing Certificates
          • Implementing Policies for Data Access, Lifecycle, and Protection
          • Rotating encryption keys and renewing certificates
          • Instance Store
          • AWS License Manager
          • Glacier
          • AWS CloudHSM Key Management & Zeroization Protection
          • EBS
        • AWS Security Services
        • Use Cases
          • IAM Policy & Directory Setup for S3 Access via Single Sign-On (SSO)
          • Federating AWS Access with Active Directory (AD FS) for Hybrid Cloud Access
      • Domain 2
        • Task Statement 2.1: Design Scalable and Loosely Coupled Architectures
          • SecureCart Journey
          • API Creation & Management
          • Microservices & Event-Driven Architectures
          • Load Balancing & Scaling Strategies
          • Caching Strategies & Edge Acceleration
          • Serverless & Containerization
          • Workflow Orchestration & Multi-Tier Architectures
        • Task Statement 2.2: Design highly available and/or fault-tolerant architectures
          • SecureCart Journey
          • AWS Global Infrastructure & Distributed Design
          • Load Balancing & Failover Strategies
          • Disaster Recovery (DR) Strategies & Business Continuity
          • Automation & Immutable Infrastructure
          • Monitoring & Workload Visibility
          • Use Cases
            • Amazon RDS Failover Events & Automatic Failover Mechanism
      • Domain 3
        • Task Statement 3.1: Determine high-performing and/or scalable storage solutions
          • SecureCart Journey
          • Understanding AWS Storage Types & Use Cases
          • Storage Performance & Configuration Best Practices
          • Scalable & High-Performance Storage Architectures
          • Hybrid & Multi-Cloud Storage Solutions
          • Storage Optimization & Cost Efficiency
          • Hands-on Labs & Final Challenge
        • Task Statement 3.2: Design High-Performing and Elastic Compute Solutions
          • SecureCart
          • AWS Compute Services & Use Cases
          • Elastic & Auto-Scaling Compute Architectures
          • Decoupling Workloads for Performance
          • Serverless & Containerized Compute Solutions
          • Compute Optimization & Cost Efficiency
        • Task Statement 3.3: Determine High-Performing Database Solutions
          • SecureCart Journey
          • AWS Database Types & Use Cases
          • Database Performance Optimization
          • Caching Strategies for High-Performance Applications
          • Database Scaling & Replication
          • High Availability & Disaster Recovery for Databases
        • Task Statement 3.4: Determine High-Performing and/or Scalable Network Architectures
          • SecureCart Journey
          • AWS Networking Fundamentals & Edge Services
          • Network Architecture & Routing Strategies
          • Load Balancing for Scalability & High Availability
          • Hybrid & Private Network Connectivity
          • Optimizing Network Performance
          • Site-to-Site VPN Integration for SAP HANA in AWS
        • Task Statement 3.5: Determine High-Performing Data Ingestion and Transformation Solutions
          • SecureCart Journey
          • Data Ingestion Strategies & Patterns
          • Data Transformation & ETL Pipelines
          • Secure & Scalable Data Transfer
          • Building & Managing Data Lakes
          • Data Visualization & Analytics
      • Domain 4
        • Task Statement 4.1: Design Cost-Optimized Storage Solutions
          • SecureCart Journey
          • AWS Storage Services & Cost Optimization
          • Storage Tiering & Auto Scaling
          • Data Lifecycle Management & Archival Strategies
          • Hybrid Storage & Data Migration Cost Optimization
          • Cost-Optimized Backup & Disaster Recovery
        • Task Statement 4.2: Design Cost-Optimized Compute Solutions
          • SecureCart Journey
          • AWS Compute Options & Cost Management Tools
          • Compute Purchasing Models & Optimization
          • Scaling Strategies for Cost Efficiency
          • Serverless & Container-Based Cost Optimization
          • Hybrid & Edge Compute Cost Strategies
          • AWS License Manager
        • Task Statement 4.3: Design cost-optimized database solutions
          • SecureCart Journey
          • AWS Database Services & Cost Optimization Tools
          • Database Sizing, Scaling & Capacity Planning
          • Caching Strategies for Cost Efficiency
          • Backup, Retention & Disaster Recovery
          • Cost-Optimized Database Migration Strategies
        • Task Statement 4.4: Design Cost-Optimized Network Architectures
          • SecureCart Journey
          • AWS Network Cost Management & Monitoring
          • Load Balancing & NAT Gateway Cost Optimization
          • Network Connectivity & Peering Strategies
          • Optimizing Data Transfer & Network Routing Costs
          • Content Delivery Network & Edge Caching
      • Week Nine
        • Final Review Session
        • Final Practice Test
Powered by GitBook

@ 2024 IT Assist LLC

On this page
  • 🔹 Step 1: Understanding Serverless vs. Containerized Compute
  • 🔹 Step 2: AWS Serverless Compute Services
  • 🔹 Step 3: AWS Containerized Compute Services
  • 🔹 Step 4: Scaling Strategies for Serverless & Containerized Compute
  • 🔹 Step 5: Cost Optimization for Serverless & Containers
  • 🔹 Step 6: Monitoring & Observability for Serverless & Containers
  • 🚀 Summary
  1. Study Group
  2. AWS Certified Solutions Architect - Associate
  3. Domain 3
  4. Task Statement 3.2: Design High-Performing and Elastic Compute Solutions

Serverless & Containerized Compute Solutions

AWS offers serverless and containerized compute solutions to help businesses build scalable, cost-efficient, and high-performing applications. SecureCart, as an e-commerce platform, leverages AWS Lambda, Fargate, ECS, and EKS to handle various workloads while reducing operational overhead.

✔ Why does SecureCart need serverless & containerized compute solutions?

  • Removes the need for managing servers and infrastructure.

  • Scales automatically based on demand.

  • Optimizes costs by paying only for compute time used.

  • Improves deployment flexibility with containers for microservices.


🔹 Step 1: Understanding Serverless vs. Containerized Compute

✔ Serverless and containerized compute solutions serve different purposes in AWS:

Compute Model

Best For

Advantages

SecureCart Use Case

Serverless (AWS Lambda)

Event-driven, short-lived workloads.

Fully managed, automatic scaling, pay-per-execution.

Processes checkout transactions and sends order notifications.

Containers (ECS, EKS, Fargate)

Long-running, scalable applications.

Optimized resource utilization, microservices-ready.

Deploys product search and recommendation services.

✅ Best Practices: ✔ Use Lambda for lightweight, asynchronous workloads. ✔ Run microservices in containers for better flexibility and resource efficiency. ✔ Use serverless functions where possible to reduce infrastructure overhead.


🔹 Step 2: AWS Serverless Compute Services

✔ AWS provides several serverless solutions for compute needs:

AWS Service

Purpose

SecureCart Use Case

AWS Lambda

Executes code in response to events.

Processes order confirmations and updates inventory.

Amazon API Gateway

Manages APIs for serverless applications.

Exposes SecureCart’s checkout and product APIs.

AWS Step Functions

Orchestrates workflows across AWS services.

Automates multi-step order processing.

AWS Fargate

Serverless compute for containers.

Runs SecureCart’s microservices without EC2 management.

✅ Best Practices: ✔ Keep Lambda functions stateless to optimize execution time. ✔ Use API Gateway for managing serverless RESTful APIs. ✔ Leverage Step Functions for coordinating serverless workflows.


🔹 Step 3: AWS Containerized Compute Services

✔ AWS provides multiple services for running containers efficiently:

AWS Service

Purpose

SecureCart Use Case

Amazon ECS (Elastic Container Service)

Orchestrates Docker containers.

Hosts SecureCart’s product catalog and payment processing services.

Amazon EKS (Elastic Kubernetes Service)

Managed Kubernetes clusters for large-scale applications.

Runs SecureCart’s AI-driven recommendation engine.

AWS Fargate

Serverless compute for ECS/EKS containers.

Deploys SecureCart’s search service without managing infrastructure.

AWS App Runner

Simplifies deployment of containerized web applications.

Quickly deploys SecureCart’s admin dashboard and reporting tools.

✅ Best Practices: ✔ Use ECS for simpler containerized workloads and EKS for Kubernetes-based applications. ✔ Leverage Fargate to run containers without provisioning EC2 instances. ✔ Use App Runner for fully managed web applications requiring containerized workloads.


🔹 Step 4: Scaling Strategies for Serverless & Containerized Compute

✔ Why? – SecureCart needs dynamic scaling to manage traffic fluctuations.

✔ Scaling Strategies for AWS Serverless & Containers:

Scaling Approach

Purpose

SecureCart Implementation

AWS Lambda Auto Scaling

Adjusts execution concurrency dynamically.

Handles high order volumes instantly.

ECS Auto Scaling

Scales containers dynamically based on load.

Expands SecureCart’s microservices during peak hours.

EKS Cluster Auto Scaling

Scales Kubernetes pods based on demand.

Optimizes SecureCart’s AI processing workload.

✅ Best Practices: ✔ Use Lambda auto-scaling for unpredictable workloads. ✔ Enable ECS auto-scaling to handle traffic surges. ✔ Use Kubernetes Cluster Autoscaler for workload optimization in EKS.


🔹 Step 5: Cost Optimization for Serverless & Containers

✔ Why? – SecureCart minimizes compute costs by choosing the right pricing model.

✔ Cost-Optimization Strategies:

Optimization Method

Purpose

SecureCart Implementation

Provisioned Concurrency for Lambda

Reduces cold-start latency for critical functions.

Speeds up SecureCart’s checkout process.

Spot Instances for ECS/EKS

Saves costs on non-critical workloads.

Runs SecureCart’s product analytics pipeline at lower costs.

Savings Plans for Fargate

Lowers cost for long-running workloads.

Optimizes pricing for SecureCart’s containerized services.

✅ Best Practices: ✔ Use Provisioned Concurrency for Lambda functions with strict latency requirements. ✔ Leverage Spot Instances for ECS/EKS workloads that tolerate interruptions. ✔ Adopt AWS Compute Savings Plans for predictable workloads.


🔹 Step 6: Monitoring & Observability for Serverless & Containers

✔ Why? – SecureCart tracks performance and health of serverless & containerized workloads.

✔ AWS Monitoring Tools for Compute Optimization:

Monitoring Tool

Purpose

SecureCart Use Case

Amazon CloudWatch

Monitors Lambda execution time and ECS/Fargate performance.

Tracks API response times and Lambda execution failures.

AWS X-Ray

Traces requests across microservices.

Analyzes API request bottlenecks in SecureCart’s checkout.

Amazon GuardDuty

Detects security threats in serverless & containerized workloads.

Identifies unusual API calls to SecureCart’s services.

✅ Best Practices: ✔ Use CloudWatch metrics to monitor Lambda duration and memory usage. ✔ Enable X-Ray tracing for deeper insights into service interactions. ✔ Enable GuardDuty to detect malicious activity in ECS & Lambda workloads.


🚀 Summary

✔ Use AWS Lambda for event-driven workloads, ECS for containerized microservices, and EKS for Kubernetes workloads. ✔ Implement auto-scaling strategies to dynamically adjust serverless & container resources. ✔ Optimize costs using Spot Instances, Savings Plans, and provisioned concurrency for Lambda. ✔ Monitor serverless & container performance using CloudWatch, X-Ray, and GuardDuty.

Scenario:

SecureCart wants to modernize its applications by moving from EC2-based workloads to serverless and containerized architectures.

Key Learning Objectives:

✅ Understand when to use AWS Lambda vs. AWS Fargate ✅ Deploy containerized applications using Amazon ECS & EKS ✅ Optimize serverless workloads using concurrency settings

Hands-on Labs:

1️⃣ Deploy a Serverless Function Using AWS Lambda 2️⃣ Run a Containerized Microservice Using AWS Fargate 3️⃣ Orchestrate Containers Using Amazon ECS & EKS

🔹 Outcome: SecureCart leverages serverless and container technologies for high availability and efficiency.

PreviousDecoupling Workloads for PerformanceNextCompute Optimization & Cost Efficiency

Last updated 2 months ago