Azure Container Instances (ACI) lets you run containers without managing servers or clusters, making it serverless. Azure Kubernetes Service (AKS) provides managed Kubernetes clusters, so you manage the cluster but not the underlying servers.
AKS supports container orchestration, allowing multiple containers to communicate, scale independently, and perform rolling updates. ACI is for simple container runs without orchestration.
When a container exceeds its CPU or memory limits in ACI, the platform throttles or terminates the container to protect resources. It does not auto-scale or restart containers automatically.
Storing images in Azure Container Registry allows you to control access and scan images for vulnerabilities, improving security. Public registries without authentication or unverified images increase risk.
Combining ACI for burst workloads and AKS for steady workloads allows cost savings by avoiding over-provisioning while maintaining performance during spikes.