Fargate serverless containers in AWS - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

Fargate Task Networking Mode

Which networking mode does AWS Fargate use to run containers securely and isolate them from other tasks?

A AWSVPC mode, assigning each task its own elastic network interface

B Bridge mode, sharing the host's network stack

C None, Fargate tasks do not use networking

D Host mode, directly using the host's network interface

💡 Hint

Think about how Fargate isolates tasks for security and networking.

AWS Fargate uses AWSVPC mode which assigns each task its own elastic network interface (ENI). This provides task-level isolation and allows tasks to have their own IP addresses.

❓ Architecture

intermediate

Scaling Fargate Tasks Automatically

You want your Fargate service to automatically add more tasks when CPU usage is high and reduce tasks when CPU usage is low. Which AWS service should you configure to achieve this?

A AWS CloudFormation stack updates

B AWS Lambda functions triggered by CloudWatch alarms

C AWS Auto Scaling with ECS Service Auto Scaling policies

D AWS Elastic Load Balancer health checks

💡 Hint

Consider the service that manages container scaling based on metrics.

To scale Fargate tasks automatically, you configure AWS Auto Scaling with ECS Service Auto Scaling policies that respond to CloudWatch metrics like CPU usage.

❓ security

advanced

IAM Role for Fargate Task Execution

Which IAM role is required for a Fargate task to pull container images from Amazon ECR and send logs to CloudWatch Logs?

A Administrator Access role assigned to the user

B Task Role attached to the ECS service

C Instance Profile role attached to the EC2 instance

D Execution Role specified in the task definition

💡 Hint

This role allows the task to perform actions needed to start and monitor containers.

The Execution Role is specified in the task definition and grants permissions to pull images from ECR and send logs to CloudWatch Logs.

❓ Configuration

advanced

Fargate Task CPU and Memory Configuration

You want to run a Fargate task with 2 vCPU and 4 GB memory. Which of the following CPU and memory combinations is valid for Fargate?

A CPU: 1024, Memory: 2048

B CPU: 2048, Memory: 4096

C CPU: 4096, Memory: 2048

D CPU: 512, Memory: 8192

💡 Hint

Check AWS Fargate allowed CPU and memory combinations.

Fargate requires specific CPU and memory combinations. For 2 vCPU, valid memory values include 4 GB (4096 MB). Option B matches this.

✅ Best Practice

expert

Securing Sensitive Data in Fargate Tasks

What is the best practice to provide sensitive information like database passwords to a Fargate task securely?

A Store the password in AWS Secrets Manager and reference it in the task definition

B Pass the password as plain text in the ECS RunTask API call

C Write the password to a file inside the container at runtime

D Hardcode the password in the container image environment variables

💡 Hint

Think about AWS services designed for managing secrets securely.

Using AWS Secrets Manager to store and reference sensitive data in the task definition is the best practice. It avoids hardcoding and keeps secrets encrypted and managed.