GB
/
GBP
/
EN_GB

Shaping the future of IT skills

Maximising IT performance through learning

Running Containers on Amazon Elastic Kubernetes Service - RCAEKS

WGAC-AWS-RCAEKS

Amazon Web Services

Description

Show Tabs
Introduction

Amazon EKS makes it easy for you to run Kubernetes on AWS without needing to install, operate, and maintain your own Kubernetes control plane. In this course, you will learn container management and orchestration for Kubernetes using Amazon EKS.

You will build an Amazon EKS cluster, configure the environment, deploy the cluster, and then add applications to your cluster. You will manage container images using Amazon Elastic Container Registry (ECR) and learn how to automate application deployment. You will deploy applications using CI/CD tools. You will learn how to monitor and scale your environment by using metrics, logging, tracing, and horizontal/vertical scaling. You will learn how to design and manage a large container environment by designing for efficiency, cost, and resiliency. You will configure AWS networking services to support the cluster and learn how to secure your Amazon EKS environment.

Prerequisites & Audience

We recommend that attendees of this course have:

  • Completed Amazon Elastic Kubernetes Service (EKS) Primer
  • Completed AWS Cloud Practitioner Essentials (CP-ESS) (or equivalent real-world experience)
  • Basic Linux administration experience
  • Basic network administration experience
  • Basic knowledge of containers and microservices
Course Benefits

In this course, you will learn to:

  • Review and examine containers, Kubernetes, and Amazon EKS fundamentals and the impact of containers on workflows.
  • Build an Amazon EKS cluster by selecting the correct compute resources to support worker nodes.
  • Secure your environment with AWS Identity and Access Management (IAM) authentication by creating an Amazon EKS service role for your cluster
  • Deploy an application on the cluster. Publish container images to ECR and secure access via IAM policy.
  • Automate and deploy applications, examine automation tools and pipelines. Create a GitOps pipeline using WeaveFlux.
  • Collect monitoring data through metrics, logs, tracing with AWS X-Ray and identify metrics for performance tuning. Review scenarios where bottlenecks require the best scaling approach using horizontal or vertical scaling.
  • Assess the tradeoffs between efficiency, resiliency, and cost and impact for tuning one over the other. Describe and outline a holistic, iterative approach to optimizing your environment. Design for cost, efficiency, and resiliency.
  • Configure the AWS networking services to support the cluster. Describe how EKS/Amazon Virtual Private Cloud (VPC) functions and simplifies inter-node communications. Describe the function of VPC Container Network Interface (CNI). Review the benefits of a service mesh.
  • Upgrade your Kubernetes, Amazon EKS, and third party tools.
Course Topics

Day 1

Module 0: Course Introduction

  • Course preparation activities and agenda

Module 1: Container Fundamentals

  • Design principles for building applications
  • What are containers?
  • Components of a container
  • Writing Dockerfiles

Module 2: Kubernetes Fundamentals

  • Challenges of managing many containers
  • What is Kubernetes, and why is it important?
  • Components of the Kubernetes control plane
  • Kubernetes worker nodes and pods
  • Key Kubernetes objects
  • Managing Kubernetes with kubectl
  • Hands-On Lab 1: Deploying Kubernetes Pods

Module 3: Amazon EKS Fundamentals

  • How Amazon EKS manages the Kubernetes control plane
  • Fundamentals of Amazon EKS security
  • Use cases for extending Amazon EKS to the data plane
  • Running worker nodes on managed node groups
  • Running containers on AWS Fargate with Amazon EKS
  • Amazon EKS tasks versus Kubernetes tasks

Module 4: Building an Amazon EKS Cluster

  • Visual review of the Amazon EKS architecture to be built in labs
  • IAM authentication
  • Amazon VPC and AWS networking fundamentals
  • Different methods to create a cluster
  • High-level steps in cluster creation
  • Function of eksctl
  • Preparing for labs: Review the lab activities for the course
  • Hands-On Lab 02: Building an Amazon EKS cluster

Day 2

Module 5: Deploying Applications to Your Amazon EKS Cluster

  • Publishing container images to Amazon ECR
  • Deploying applications with Helm
  • Continuous deployment in Amazon EKS
  • GitOps and Amazon EKS
  • Hands-On Lab 03: Deploying applications

Module 6: Architecting on Amazon EKS Part 1: Observe and Optimize

  • Configuring observability in an Amazon EKS cluster
  • Collecting metrics
  • Using metrics to automatically scale EC2 Auto Scaling groups
  • Managing logs
  • Application tracing in Amazon EKS
  • Gaining and applying insight from observability
  • Hands-On Lab 04: Monitoring Amazon EKS

Module 7: Architecting on Amazon EKS Part 2: Balancing Efficiency, Resiliency, and Cost

  • Optimizing your Amazon EKS application architecture
  • Relationship between cost, efficiency, and resilience
  • Anatomy of an Amazon EKS cluster from a cost perspective
  • Using tagging with pod placement for cost accountability
  • Sizing containers and worker nodes efficiently

Day 3

Module 8: Managing Networking in Amazon EKS

  • Review: VPC fundamentals
  • The importance of major communication components
  • Communication flow in a noncontainerized architecture
  • Challenges of network communication in Kubernetes
  • Comparing the Docker communication solution with the Kubernetes model
  • How Amazon EKS and Amazon VPC simplify inter-node communications
  • Managing pod communication in Amazon EKS
  • The relationship between communications and scalability
  • Running worker nodes in a subnet not associated with the cluster
  • Managing service name resolution
  • Using a service mesh with Amazon EKS
  • Configuring AWS App Mesh
  • Hands-On Lab 05: Exploring Amazon EKS Communication

Module 9: Securing Amazon EKS Clusters

  • How IAM integrates with Kubernetes Role Based Access Control (RBAC)
  • Managing cluster endpoint access control
  • Auditing access with AWS CloudTrail logs
  • Mitigating security risks during the build of a container image
  • Securing network communications
  • Managing secrets
  • Hands-On Lab 06: Securing Amazon EKS

Module 10: Managing Upgrades in Amazon EKS

  • Contrasting Kubernetes version updates and Amazon EKS platform version updates
  • Upgrading your Kubernetes version
  • Upgrading your Amazon EKS version
  • Maintaining your third-party applications

Amazon Web Services courses


Deep Learning on AWS - AWSDL
CODE: WGAC-CSC-AWSDL
Exam Readiness: AWS Certified Solutions Architect – Associate - ACSAA-EX
CODE: WGAC-AWS-ACSAA-EX
AWS Technical Essentials - AWSE
CODE: WGAC-AWS-AWSE
Security Engineering on AWS - AWSSO
CODE: WGAC-AWS-AWSSO
AWS Discovery Day - AWSDD
CODE: WGAC-AWS-AWSDD
AWS Cloud Ready Hackathon: Running Cloud Workloads with Kubernetes - AWSHRWK
CODE: WGAC-AWS-AWSHRWK
Exam Readiness: AWS Certified Data Analytics – Specialty - ACDAS-EX
CODE: WGAC-AWS-ACDAS-EX
MLOps Engineering on AWS - MLOE
CODE: WGAC-AWS-MLOE
Exam Readiness: AWS Certified Developer - Associate - ACDA-EX
CODE: WGAC-AWS-ACDA-EX
Advanced Architecting on AWS - AAAWS
CODE: WGAC-AWS-AAAWS
Migrating to AWS - AWSM
CODE: WGAC-AWS-AWSM
Big Data on AWS - BDAWS
CODE: WGAC-AWS-BDAWS
Building Data Lakes on AWS - BDLA
CODE: WGAC-AWS-BDLA
Developing on AWS - AWSD
CODE: WGAC-AWS-AWSD
Advanced Architecting on AWS - AWSAA
CODE: WGAC-AWS-AWSAA
Exam Readiness: AWS Certified DevOps Engineer – Professional - ACDOEP-EX
CODE: WGAC-AWS-ACDOEP-EX
Planning and Designing Databases on AWS - PD-DB
CODE: WGAC-AWS-PD-DB
AWS Well-Architected Best Practices - WABP
CODE: WGAC-AWS-WABP
AWS Discovery Day (3 hours) - AWSDD3H
CODE: WGAC-AWS-AWSDD3H
AWS Cloud Practitioner Essentials - CP-ESS
CODE: WGAC-AWS-CP-ESS
Architecting on AWS - AWSA
CODE: WGAC-AWS-AWSA
Data Warehousing on AWS - DWAWS
CODE: WGAC-AWS-DWAWS
Exam Readiness Intensive Workshop: AWS Certified Solutions Architect – Associate - ACSAA-EXIW
CODE: WGAC-AWS-ACSAA-EXIW
DevOps Engineering on AWS - AWSDEVOPS
CODE: WGAC-AWS-AWSDEVOPS
Running Containers on Amazon Elastic Kubernetes Service - RCAEKS
CODE: WGAC-AWS-RCAEKS
AWS Cloud Ready Hackathon: Containers, Kubernetes CI & CD - AWSHCKC
CODE: WGAC-AWS-AWSHCKC
Exam Readiness: AWS Certified Security - Specialty - ACSS-EX
CODE: WGAC-AWS-ACSS-EX
AWS Security Governance at Scale - SGS
CODE: WGAC-AWS-SGS
Exam Readiness: AWS Certified Advanced Networking - Specialty - ACANS-EX
CODE: WGAC-AWS-ACANS-EX
Advanced Developing on AWS - ADV-DEV
CODE: WGAC-AWS-ADV-DEV
AWS Cloud Essentials for Business Leaders - CEBL
CODE: WGAC-AWS-CEBL
AWS Cloud Essentials for Business Leaders – Financial Services - CEBL-FS
CODE: WGAC-AWS-CEBL-FS
AWS Security Essentials - SEC-ESS
CODE: WGAC-AWS-SEC-ESS
Practical Data Science with Amazon SageMaker - PDSASM
CODE: WGAC-AWS-PDSASM
AWS Cloud Ready Hackathon: Coding and Testing on Linux - AWSHCTL
CODE: WGAC-AWS-AWSHCTL
Building Data Analytics Solutions Using Amazon Redshift - BDASAR
CODE: WGAC-AWS-BDASAR
Exam Readiness: AWS Certified Database – Specialty - ACDS-EX
CODE: WGAC-AWS-ACDS-EX
Systems Operations on AWS - AWSSYS
CODE: WGAC-AWS-AWSSYS
Architecting on AWS Accelerator - ARCH-AX
CODE: WGAC-AWS-ARCH-AX
Exam Readiness: AWS Certified Solutions Architect – Professional - ACSAP-EX
CODE: WGAC-AWS-ACSAP-EX
Machine Learning Pipeline on AWS - ML-PIPE
CODE: WGAC-AWS-ML-PIPE
We use cookies to understand how you use our site and to improve your experience. To learn more, click here. Read our revised Privacy Policy and Terms and Conditions.