Cloud security posture management provides threat intelligence, detection and remediation for complex cloud environments. Here's what you need to know about CSPM vendors.
Amazon s container service running on-premises: a turnaround for a company that once scorned hybrid cloud
Tim Anderson Tue 1 Jun 2021 // 18:45 UTC Share
Copy
ECS Anywhere, which enables on-premises or Edge container applications to be managed by AWS, is now generally available.
The Elastic Container Service is the AWS alternative to Kubernetes for container orchestration. AWS also offers EKS (Elastic Kubernetes Service), but ECS is easier to use and tightly integrated to other AWS services like IAM (Identity and Access Management) and ELB (Elastic Load Balancer).
Wheeled out at the company s re:Invent shindig last December, ECS Anywhere and allows customers to run containers on ECS on their own infrastructure.
Google Cloud Run envy? Share
AWS has introduced App Runner, with immediate general availability, for quick deployment of container-based applications.
The off-prem titan already offers multiple ways to run containerised applications on its cloud. There is the full-featured EKS (Elastic Kubernetes Service); the ECS (Elastic Container Service), the homegrown non-Kubernetes solution; containers up to 10GB can be deployed on Lambda serverless; or there is Fargate, which is a serverless option for either EKS or ECS. Why yet another option?
The focus with App Runner is to further simplify the developer experience, perhaps with an eye on what Google has achieved with its Cloud Run service, complete with an option for one-button deploy from GitHub.
Companies adopt hybrid and multicloud strategies for various reasons, including reliability, geographic necessity, and vendor independence and with this comes the complexity that no two private or hybrid clouds are alike. Despite the industry standardizing on Kubernetes, how it presents itself is different for every cloud. Amazon‘s Elastic Kubernetes Service (EKS) requires different configuration than Microsoft’s Azure Kubernetes Service (AKS) or Google Kubernetes Engine (GKE). Most private clouds are built on platforms like VMWare‘s Tanzu/VSphere or Nutanix where the installs and deployed capabilities are often highly customized.
Any systems engineer who has tried to maintain multicloud or hybrid cloud infrastructure knows that this variability makes management very difficult. It is not just the different Kubernetes configurations but the scripts necessary to log in and apply the changes are also unique. And even if one is adopting infrastructure as code approaches, managing
Anthos version 1.7 includes a new Connect Gateway feature, which enables it to discover clusters in different multi-cloud environments using simple queries. Admins can then connect to them and authenticate using consistent infrastructure, including Google Cloud services identities. Admins can use the gateway to create definitions using Cloud Build, which packages and deploys software. That means they can deploy software via Cloud Build to any Anthos cluster.
The system also includes new capabilities to access cloud services securely from applications. Version 1.7 makes Google s Workload Identity service available to on-premises applications and in AWS. This service enables Kubernetes services accounts to source authentication credentials from identity access management systems.