Question

Difficulty: MediumContainer-Based Workloads

A multinational retail company is designing a container-based processing backend for an e-commerce platform that operates in both the United States (US) and the European Union (EU). The application has the following design requirements:

* Scale container instances dynamically from zero based on queue metrics using Kubernetes Event-driven Autoscaling (KEDA).
* Utilize Dapr for simplified service-to-service communication between microservices.
* Minimize administrative effort and operational overhead for managing the underlying host infrastructure.
* Comply with strict regulatory data residency laws that require log data for EU and US transactions to be isolated within their respective regions, preventing any cross-region consolidation.

Which infrastructure design should you recommend for the container hosting and logging?

  1. A
    Deploy the microservices to Azure Kubernetes Service (AKS), and configure two separate regional Log Analytics workspaces (one in the US and one in the EU) to collect the logs.
  2. B
    Deploy the microservices to Azure Container Apps, and configure a single centralized Log Analytics workspace to collect and isolate logs using resource-context access control.
  3. Deploy the microservices to Azure Container Apps, and configure two separate regional Log Analytics workspaces (one in the US and one in the EU) to collect the logs.Answer
  4. D
    Deploy the microservices as Azure Functions on a Consumption plan, and configure two separate regional Log Analytics workspaces (one in the US and one in the EU) to collect the logs.

Answer

Deploying the microservices to Azure Container Apps and configuring two separate regional Log Analytics workspaces (one in the US and one in the EU) satisfies all compute and compliance requirements.
Deploying the microservices to Azure Container Apps and configuring two separate regional Log Analytics workspaces is correct. Azure Container Apps is a serverless platform that supports microservice features like KEDA scaling and Dapr out of the box with minimal management overhead. Configuring two separate regional workspaces ensures that data is stored locally within each region, satisfying strict compliance regulations regarding physical log isolation.

Step-by-Step Solution

1
Assess the compute requirements for KEDA, Dapr, and operational effort.
Azure Container Apps natively supports KEDA scaling and Dapr integration, and operates as a serverless service with less administrative effort than Azure Kubernetes Service.
Azure Container Apps abstracts the underlying Kubernetes cluster management while still providing enterprise container capabilities.
2
Evaluate the compliance requirements for log data residency.
Separate Log Analytics workspaces are required in the United States and the European Union regions to ensure physical data isolation.
A single centralized workspace would consolidate the log data across regions, violating the physical data residency boundary requirement.
3
Select the option that matches the optimal compute and logging configuration.
The configuration using Azure Container Apps with two separate regional workspaces satisfies all design constraints.
It achieves serverless container execution with native microservices features and respects regulatory boundaries.

Key Concept

Evaluating Azure container hosting services and regional log workspace boundaries to meet performance and regulatory requirements.
Rate this question