SAA-C03 Question 272
Select 2A company is running a containerized web application on Amazon ECS using a Fargate launch type. The application requires seamless service discovery and secure communication between containers. How can you meet these requirements?
- A
Enable AWS App Mesh to manage service-to-service communication and secure traffic between containers.
- B
Use an Application Load Balancer (ALB) with HTTPS listeners to route traffic securely to ECS tasks.
- C
Configure ECS Service Discovery to automatically register services in AWS Cloud Map and enable DNS-based service discovery.
- D
Deploy an Amazon RDS database inside the same ECS cluster to centralize service discovery.
- E
Add a Network Load Balancer (NLB) to handle DNS resolution for ECS services.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the requirements of seamless service discovery and secure communication between containers, you can use AWS App Mesh for service-to-service communication with encryption and ECS Service Discovery for DNS-based service registration and discovery. These solutions work together to ensure secure and reliable communication in a containerized environment on Amazon ECS.
- A. Correct.
AWS App Mesh is a service mesh that provides service-to-service communication and adds security features like encryption for ECS tasks. This is a valid way to meet the requirement.
- B. Incorrect.
Using an ALB with HTTPS listeners can secure external traffic but does not directly handle service discovery or internal communication between containers.
- C. Correct.
ECS Service Discovery integrates with AWS Cloud Map to register ECS services, enabling DNS-based service discovery, which meets the requirement.
- D. Incorrect.
Amazon RDS is a managed database service and is unrelated to service discovery or container communication. Deploying it in the ECS cluster would not achieve the described requirements.
- E. Incorrect.
A Network Load Balancer (NLB) is designed for high-performance TCP/UDP traffic routing and does not provide DNS-based service discovery for ECS tasks.