Deploy Containers on AWS With EC2, ECS, and EKS

✍ Scribed by Ifrah, Shimon

• Publisher: Apress
• Year: 2019
• Tongue: English
• Leaves: 377
• Edition: 1st ed. 2019
• Category: Library

✦ Synopsis

Start deploying, managing, and scaling containerized applications into AWS container infrastructure using Docker on Amazon EC2, Amazon Elastic Container Service (ECS), and AWS Elastic Kubernetes Service (EKS). This step by step practical book will cover all the available container services on AWS and review the usage of each one based on your required scale and cost. Further, you will see how to set up each environment and finally deploy, manage, and scale containerized applications on each one.
In the chapter about Elastic Kubernetes Service (EKS), you will learn the process of building and managing Kubernetes clusters on AWS and see how to provision hosts in a matter of minutes, while deploying containers in seconds and making them available globally.
Deploy Containers on AWSshows you how to get started with AWS container offerings and manage production or test environments of containerized applications using a hands-on approach with step-by-step instructions.
What You Will Learn
Deploy and manage containers with Docker on Amazon EC2
Store and retrieve container images using the Amazon EC2 container registry
Orchestrate containers with Amazon Elastic Container Service (ECS)
Run Kubernetes-managed infrastructure on AWS (EKS)
Monitor, manage, back up, and restore containers on AWS

Who This Book Is ForDevelopers, cloud and systems administrators, and architects

✦ Table of Contents

Table of Contents......Page 4
About the Author......Page 11
About the Technical Reviewers......Page 12
Acknowledgments......Page 13
Introduction......Page 14
Chapter 1: Getting Started with Containers on Amazon AWS......Page 16
Installing Docker Desktop......Page 17
Installing Docker Desktop on Windows 10......Page 18
Running Docker on a Virtual Machine with Nested Virtualization......Page 21
Installing Docker Desktop on macOS......Page 23
Installing Docker on Linux......Page 24
Signing Up for an Amazon AWS Account......Page 27
Using AWS CLI......Page 28
Installing AWS CLI on Windows 10......Page 29
Installing AWS CLI on Linux and macOS......Page 30
Using AWS CLI......Page 31
Configuring AWS CLI......Page 33
Using AWS CLI......Page 35
Downloading an Amazon Linux Container Image......Page 37
Using Visual Studio Code......Page 41
Installing the Docker Extension for VS Code......Page 42
Introducing Git and GitHub......Page 44
Using GitHub......Page 46
Understanding Key Concepts of Containers on Amazon AWS......Page 52
Elastic Container Service......Page 53
Elastic Kubernetes Service......Page 54
Summary......Page 55
Chapter 2: Storing, Managing, and  Deploying Docker Container Images with  Amazon ECR......Page 56
ECR Pricing......Page 57
Creating an IAM Account......Page 58
Creating an Access Key for AWS CLI......Page 65
Creating an ECR Repository......Page 66
Noting the ECR URI......Page 69
Building an Image......Page 70
Authenticating to AWS ECR......Page 72
Pushing the Image......Page 73
Publishing Images from Visual Studio 2017 to AWS ECR......Page 74
Pulling Images from Amazon ECR......Page 76
Pulling an Image from ECR......Page 77
Creating a Lifecycle Policy......Page 78
Applying the Policy......Page 82
View Results......Page 83
Adding Tags......Page 84
Cost and Usage Report......Page 86
Creating an S3 Storage Bucket......Page 88
Creating a Report......Page 89
Viewing Reports......Page 94
Deleting Images......Page 95
Summary......Page 96
Chapter 3: Deploying Containerized Applications with  Amazon ECS......Page 97
ECS EC2 Cluster Introduction......Page 98
Tasks......Page 99
Fargate......Page 100
Deploying the Container with ECS Fargate and ECR......Page 101
Creating an ECS Service......Page 111
Implementing Auto Scaling......Page 114
Creating an ECS EC2 Cluster......Page 115
Creating a Task Definition for an ECS EC2 Cluster......Page 119
Creating a Task......Page 122
Scaling Task Definitions......Page 126
Scaling an ECS EC2 Cluster......Page 127
AWS CloudWatch......Page 130
Installing AWS ECS CLI on Windows 10......Page 132
Using ECS CLI......Page 136
Using AWS CLI......Page 138
Running Windows Containers on an AWS ECS Cluster......Page 139
Summary......Page 147
Chapter 4: Deploy a Containerized Application with Amazon EKS......Page 148
Getting Started with Amazon EKS......Page 149
Kubernetes Building Blocks......Page 150
Control Panel (Master) Components......Page 151
Setting Up AKS......Page 152
Installing kubectl on Windows......Page 153
Installing kubectl on Linux......Page 157
Installing AWS IAM Authenticator on macOS......Page 158
Installing AWS IAM Authenticator on Windows......Page 159
Creating the EKS Service Role......Page 160
Creating a VPC and Security Group......Page 161
Creating an EKS Cluster......Page 163
Creating an EC2 Key Pair......Page 165
Creating a Worker Node......Page 166
Joining the Worker Node EKS Cluster......Page 169
Deploying the Application......Page 171
Deploying the Kubernetes Web UI......Page 172
Managing and Securing the EKS Cluster......Page 178
Using Useful Kubectl Commands......Page 181
Using AWS CLI......Page 183
Adding Worker Nodes......Page 184
Summary......Page 186
Chapter 5: Installing a Docker Host on an Amazon EC2 Instance......Page 187
Setting Up a Linux Instance as a Docker Container Host......Page 188
SSHing to a Linux Host from Windows 10......Page 189
Importing a Private Key to PuTTY......Page 190
Configuring Putty to Connect to a Container Host......Page 191
Installing Docker......Page 194
Connecting from a Linux Machine to an EC2 Container Host......Page 196
Installing a Docker Host on a Windows Server Virtual Machine......Page 197
Updating Docker on Windows Server......Page 205
Downloading Images......Page 207
Deploying Containers......Page 210
Deleting Containers......Page 212
Deleting Multiple Containers......Page 213
Modifying a Security Group on an EC2 Host......Page 214
Managing Storage Volumes......Page 219
Summary......Page 223
Chapter 6: Securing Your Containerized Environment......Page 225
Protecting Your Service Accounts on Amazon AWS Container Services......Page 226
Using IAM Groups......Page 227
Granting Least Privileges......Page 228
Using Policies......Page 229
Reviewing Policies and Policy Usage......Page 236
Using a Password Policy......Page 237
Setting Up Multifactor Authentication for Root Accounts......Page 239
Setting Up IAM Roles......Page 240
Rotating Security Keys......Page 242
Creating a Trail......Page 244
Using AWS CloudWatch......Page 247
Customizing the Navigation Menu......Page 248
Getting Started with CloudWatch......Page 250
Using CloudWatch Dashboards......Page 251
Configuring Billing Alerts......Page 255
Using AWS Config......Page 259
Using AWS Web Application Firewall......Page 261
Configuring WAF......Page 262
Summary......Page 266
Chapter 7: Scaling the AWS EKS, ECS, and ECR Containerized Environments......Page 267
Creating an EKS IAM Role......Page 268
Creating a VPC......Page 269
Creating the Cluster......Page 271
Creating a Configuration File......Page 274
Creating a Worker Node......Page 275
Scaling Amazon EKS......Page 280
Scaling Down......Page 284
Scaling the ECS Fargate Service......Page 285
Scaling a Task Definition......Page 288
Scaling an ECS Cluster......Page 290
Scaling a Task Definition with an ECS Cluster......Page 291
Scaling Amazon ECR......Page 292
Creating an ECR Repository in a Different Region......Page 293
Updating the EKS Cluster Version......Page 295
Scaling the Docker Container Host......Page 298
Summary......Page 300
Chapter 8: Monitoring Your Containerized Environment......Page 301
Installing Heapster......Page 302
Installing influxdb......Page 303
Creating a Heapster Cluster Role......Page 304
Creating an EKS-Admin Service Account......Page 305
Opening a Dashboard......Page 307
Monitoring EKS......Page 308
Monitoring Pods......Page 309
Monitoring Nodes......Page 310
Using CloudWatch......Page 312
Creating a New CloudWatch Dashboard......Page 314
Monitoring Container Instances on Amazon ECS......Page 319
Viewing ECS Fargate Container Logs......Page 322
Monitoring Amazon ECR Performance......Page 325
Monitoring the Docker Container Host......Page 326
Creating an Alarm......Page 328
Summary......Page 330
Chapter 9: Backing Up and Restoring Your Containers and Hosts on Amazon AWS......Page 331
Taking an EBS Snapshot (Backup)......Page 332
Taking an EC2 Snapshot......Page 335
Creating a Volume from a Snapshot......Page 339
Attaching a Volume to an EC2 Instance......Page 340
Detaching an Old Volume......Page 341
Backing Up and Restoring ECS Fargate Containers......Page 344
Backing Up Your Amazon EKS Configuration......Page 346
Using AWS Backup......Page 347
Summary......Page 349
Dealing with Common Issues......Page 350
Troubleshooting Performance Issues......Page 351
Using AWS CLI......Page 352
Using AWS CLI EKS Commands......Page 353
Troubleshooting EKS Worker Nodes......Page 355
Troubleshooting Amazon ECS Operations......Page 358
Using AWS ECS CLI......Page 359
Using the ECR Management Console......Page 362
Using AWS CLI......Page 363
Troubleshooting Amazon EC2 Container Hosts......Page 365
Using AWS CLI EC2......Page 366
Summary......Page 369
Index......Page 370