Running Containers on Amazon Elastic Kubernetes Service
Please not that this is not a prep course for any AWS certification!
This document contains links mentioned in the “Running Containers on Amazon Elastic Kubernetes Service” course.
Module 0: Course Introduction
Full name: Running Containers on Amazon Elastic Kubernetes Service
Product code: 200-COREKS-21
These links are based on the course version 2.1.1.
The official course material: eVantage Bookshelf (VitalSource)
Additional material: AWS Skill Builder
Module 1: Kubernetes Fundamentals
Websites
- The Twelve-Factor App
- Containers on AWS
- CNCF Projects
- Kubernetes Documentation: Overview
- Nodes
- Building Large Clusters
- Managing Resources for Containers
- Affinity and anti-affinity
- Labels, Annotations, and Taints
- Multi-tenancy
- Workloads
- Bare Pods
AWS Services
- Amazon EKS Overview - Documentation
- Amazon ECS Overview - Documentation
- AWS Fargate Overview - Documentation
Module 2: Amazon Elastic Kubernetes Service (Amazon EKS) Fundamentals
Websites
- AWS Fargate – Amazon EKS
- Services in Scope by Compliance Program
- AWS Fargate Considerations – Amazon EKS
- eksctl - The Official CLI for Amazon EKS
AWS Services
- AWS Fargate Overview - Documentation
- AWS Compliance Overview - Documentation
Module 3: Building and Maintaining an Amazon EKS Cluster
Websites
- Getting Started with Amazon EKS – eksctl
- Installing the AWS CLI Version 2
- Installing
aws-iam-authenticator - Installing
kubectl - eksctl GitHub Repository
- eksctl - The Official CLI for Amazon EKS
- Amazon EKS AMI Build Scripts
- AWS CDK EKS Blueprints Quick Start
- Updating an Amazon EKS Cluster Kubernetes Version
- Kubernetes Changelog
- Version Skew Policy
- Kubernetes API Deprecation Policy
- Kubernetes API Deprecation Guide
- Amazon EKS Extended Support for Kubernetes Versions Pricing
- Backup and Restore Your Amazon EKS Cluster Resources Using Velero
- Upgrades / AWS EKS Best Practices Guides
- Updating a Managed Node Group
- Amazon EKS-Optimized AMIs
AWS Services
- Amazon EKS Overview - Documentation
- AWS IAM Overview - Documentation
- AWS CloudFormation Overview - Documentation
Module 4: Deploying Applications to Your Amazon Elastic Kubernetes Service (Amazon EKS) Cluster
Websites
- Amazon Elastic Container Registry (ECR)
- Clair
- Scan images for OS and programming language package vulnerabilities in Amazon ECR
- Creating an Amazon ECR private repository to store images
- Helm - The package manager for Kubernetes
- Helm - Built-in Objects
- Helm - The Chart Template Developer’s Guide
- ArtifactHUB - Find, install and publish Cloud Native packages
- Using Amazon ECR Images with Amazon EKS
- Set up a Helm v3 chart repository in Amazon S3
Services
Module 5: Managing Applications at Scale in Amazon EKS
Websites
- Scaling Kubernetes Deployments with Amazon CloudWatch Metrics
- Horizontal Pod Autoscaler - Amazon EKS
- Meaning of CPU
- Prometheus Monitoring
- Vertical Pod Autoscaler
- Cluster Autoscaler on AWS
- Cluster Autoscaler FAQ
- Cluster Autoscaling
- Karpenter Documentation
- Topology Spread Constraints
- Scheduling Concepts / Karpenter
- Karpenter
- Amazon EKS Partners
AWS Services
Module 6: Managing networking in Amazon EKS
Websites
- Network ACLs / Amazon VPC
- amazon-vpc-cni-k8s GitHub Repository
- Enable Integration with AWS IPAM
- Amazon VPC CNI Now Supports Kubernetes Network Policies
- Security Groups for Pods
- amazon-vpc-resource-controller-k8s GitHub Repository
- Networking and Network Policy Add-ons
- Security Group Requirements
- AWS Load Balancer Controller
- Managing CoreDNS
AWS Services
- Amazon VPC Overview - Documentation
- Amazon EKS Overview - Documentation
- Elastic Load Balancing Overview - Documentation
Module 7: Configuring observability in an Amazon EKS cluster
Websites
- OpenMetrics Specification
- Prometheus Monitoring System
- Prometheus Exposition Formats
- Grafana Analytics & Monitoring
- AWS Distro for OpenTelemetry
- AWS Distro for OpenTelemetry Is Now Generally Available for Metrics
- Amazon Managed Service for Prometheus Collector Provides Agentless Metric Collection for Amazon EKS
- Container Insights Metrics / Amazon CloudWatch
- Amazon EKS Control Plane Logging
- Amazon OpenSearch Service
- Centralized Container Logging with Fluent Bit
- Setting Up Fluent Bit on Amazon EKS
- Fluent Bit for Amazon EKS on AWS Fargate Is Here
- Logging Using Fluent Bit on AWS Fargate
- Sidecar vs. Service / AWS Distro for OpenTelemetry
AWS Services
- Amazon CloudWatch Overview - Documentation
- Amazon OpenSearch Service Overview - Documentation
- AWS Distro for OpenTelemetry Overview
Module 8: Managing Storage in Amazon EKS
Websites
- StatefulSet
- Amazon Elastic Block Store (EBS)
- Amazon Elastic File System (EFS)
- Amazon FSx File Systems
- What Is Amazon FSx for Lustre?
- What Is Amazon FSx for NetApp ONTAP?
- Volumes
- Storage on Amazon EKS
- Amazon EBS
- Amazon EBS Volume Types
- AWS EBS CSI Driver Parameters
- What is Amazon Elastic File System?
- aws-efs-csi-driver GitHub Repository
- JMESPath
- AWS Secrets Manager VPC Endpoint
- Secret Auto Rotation with Secrets Store CSI Driver
- AWS Documentation
- How to Use AWS Secrets Configuration Provider with Kubernetes Secrets Store CSI Driver
- SecretProviderClass
AWS Services
- Amazon EBS Overview - Documentation
- Amazon EFS Overview - Documentation
- Amazon FSx Documentation
- AWS Secrets Manager Overview - Documentation
Module 9: Managing Security in Amazon EKS
Websites
- Kubernetes Protection / Amazon GuardDuty
- Adding Users and Roles to Your Amazon EKS Cluster
- Managing Users or IAM Roles for Your Cluster
- IAM Best Practices
- Authorization Overview
- Using RBAC Authorization
- Default Roles and Role Bindings
- rbac-lookup GitHub Repository
- Changes in Kubernetes 1.24 About ServiceAccounts and Their Secrets
- Service Account Tokens
- kube-ops-view GitHub Repository
- amazon-eks-pod-identity-webhook GitHub Repository
- IAM Roles for Service Accounts
- Restrict Access to IMDS
AWS Services
- Amazon GuardDuty Overview - Documentation
- AWS IAM Overview - Documentation
- Amazon EKS Overview - Documentation
Module 10: Course Wrap-Up
Websites
- AWS Certification exam preparation
- AWS Certification
- AWS Recertification
- All AWS Certification exams
- Schedule an Exam
- AWS Skill Builder subscription
- AWS Training and Certification
- AWS Online Tech Talks
- AWS Ramp-Up Guides