Integrate ROSA Applications with AWS Services - CS221

3652 Ratings

Rated 4.6 out of 5

4658 Learners

Overview

Integrate applications on ROSA with AWS services while keeping a good security posture.

- Integrate applications deployed on ROSA with AWS services in a way that cluster administrators and platform engineers retain control of credentials and roles required by applications to access AWS services instead of exposing those credentials to application developers.

Key Features

Course content summary

- Integrate with external container registries such as ECR and Quay.io to deploy applications from private image repositories
- Configure storage classes to enable application access to different EBS volume types
- Configure storage classes and security contexts to enable application access to shared EFS storage volumes
- Configure pod identity using STS/IRSA to enable application access to AWS services such as database (Aurora), integration (SQS), and object storage (S3)
- Provision AWS services for applications using the AWS Controllers for Kubernetes (ACK)
- Federate and query application metrics (application workload monitoring) with Amazon Managed Prometheus Service
- Aggregate and query structured application logs with Amazon CloudWatch
- Configure custom domains and TLS certificates for secure public access to applications

Audience for this course

- Primary: ROSA Administrators, Platform Engineers, Cloud Administrators, System Administrators and other infrastructure-related IT roles who are responsible for providing and supporting infrastructure for applications deployed on AWS
- Secondary: Enterprise Architects, Site Reliability Engineers, DevOps Engineers, and other application-related IT roles who are responsible for designing infrastructure for applications deployed on AWS

Prerequisites for this course

- CS220 – Create and Configure Production Red Hat OpenShift on AWS (ROSA) Clusters or equivalent experience: “I know how to create and access a private ROSA cluster”
- AWS administration at the level of either AWS Certified SysOps Administrator – Associate or AWS Certified Solutions Architect – Associate, or equivalent experience: “I know how to manage AWS infrastructure services”
- Basic knowledge of OpenShift from DO080 Technical Overview: “I know basic concepts of OpenShift and containers”
- It is recommended that learners also enroll in the Red Hat Certified OpenShift Administration certification courses in addition to taking CS220 and CS221

Technology considerations

- Internet access is required to access AWS services by using the AWS console and the AWS CLI. It is also required to access the Red Hat Hybrid Cloud Console and associated Red Hat cloud services.
- Students must possess an active Red Hat customer portal account or a free Red Hat Developer program membership.
- This course assumes a PrivateLink STS ROSA cluster and a bastion host to access the cluster, as configured in Chapter 01 of CS220: Creating and Configuring Production Red Hat OpenShift on AWS (ROSA) Clusters. Students must either perform these activities from CS220 prior to starting CS221. Ch0 in the CS221 course book covers these activities and provides links to cloud formation templates.

Training Options

Outline

Deploy Applications From External Registries

Deploy applications on Red Hat OpenShift Service on AWS (ROSA) from private container image repositories in external centralized container image registries.

Provide Amazon Storage Volumes for Applications

Configure Amazon Elastic Block Storage (EBS) or Amazon Elastic File System (EFS) volumes that meet the cost, performance, and sharing requirements of their applications.

Configure Application Access to AWS Services

Configure applications for access to shared AWS services by using Kubernetes service accounts, and provision dedicated AWS services by using Kubernetes custom resources.

OpenShift and AWS Application Observability

Configure ROSA clusters to forward application logs to Amazon CloudWatch and application metrics to Amazon Managed Service for Prometheus.

Custom Domains for ROSA Applications

Expose applications to internet users with secure URLs by using human-readable DNS domains.

Outcome

Impact on the Organization

- Red Hat OpenShift Service on AWS (ROSA) is a turnkey application platform that provides a managed Red Hat OpenShift service that runs natively on Amazon Web Services (AWS) to enable organizations to increase operational efficiency, refocus on innovation, and quickly build, deploy, and scale applications. Red Hat OpenShift is the hybrid cloud platform that brings operational consistency to on-premise and different cloud environments.
- Organizations adopting ROSA are typically existing AWS customers with skills on using AWS services for a variety of business scenarios and need to integrate managed OpenShift clusters with their pre-existing AWS environments. These organizations are usually very security-conscious and require strong access controls and network security for all of their AWS services, including their ROSA clusters.

Impact on the Individual

- After completing CS221, students can integrate applications deployed on a private ROSA cluster in a way that cluster administrators and platform engineers retain control of credentials and roles required by applications to access AWS services, instead of exposing those credentials to application developers.

Why Innovative Technology Solutions

Our Virtual Instructor Led Training model brings classroom learning experience online. With our world-class LMS instructor-led training, self-paced E-learning and personalized mentoring you will get an immersive first-class learning experience.

Self-Paced E-learning

A self-paced e-learning with recorded video sessions that you can access anytime without going beyond your comfort zone.

Live Virtual Classroom

An interactive classroom style virtual instructor led training to engage and learn more alongside your peers with a live trainer.

Learner's Community

A Social forum where you can ask your questions, one of our expert will reply you within 24 hours on that community.

Online Access of Labs

Online access of practise labs that you can access anytime, anywhere your machine.

Industry Based Projects

Real-time Industry based projects will be shared by the trainers throughout the program

24/7 Assistance

Get engaged with integrated support assistance on your desktop and mobile learning