Examkin

Question

Difficulty: HardAWS Compute Services

A financial services organization is migrating a containerized application to AWS. The application requires custom kernel-level configurations and third-party security agents to be installed directly on the underlying host operating system for compliance auditing. The team wants to utilize container orchestration to manage the application but must retain full root access to the virtualization host. Which AWS compute option is the most appropriate to satisfy these requirements?

  1. Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch typeAnswer
  2. B
    Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type
  3. C
    AWS Lambda packaged as a container image
  4. D
    Amazon Lightsail container service

Answer

Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type
The correct answer is the option indicating Amazon ECS with the Amazon EC2 launch type. This deployment model allows the customer to orchestrate containerized applications while retaining full administrative control, root access, and configuration capability over the underlying EC2 instances. This is necessary for installing custom security agents at the OS level and making kernel-level modifications.

Step-by-Step Solution

1
Analyze the business and technical requirements of the workload.
The application is containerized, requires container orchestration, and must allow custom kernel-level OS modifications and host security agent installation.
This establishes the constraints: we need container management but must retain full control over the underlying operating system and virtualization host.
2
Evaluate AWS Fargate against the constraints.
Fargate is serverless container execution. Because AWS manages the underlying EC2 instances and OS, root access is unavailable.
This rules out AWS Fargate launch type.
3
Evaluate AWS Lambda and Amazon Lightsail against the constraints.
AWS Lambda abstracts all server management and has execution limits, while Amazon Lightsail container service does not allow host-level operating system configurations.
This rules out other serverless or simplified compute services.
4
Evaluate Amazon ECS with the Amazon EC2 launch type.
ECS with the EC2 launch type gives the user full administrative control over the EC2 instances in the ECS cluster, including operating system and kernel settings.
This option satisfies all container orchestration and compliance requirements.

Key Concept

Shared Responsibility Model application in managed vs. unmanaged AWS compute environments.
Estimated Time:1m 30s
Rate this question

Topics

AWS Compute Services

More questions from this topic