Question #720
A company is migrating a content management system (CMS) to AWS. The CMS runs as a Docker container and requires an NFS version 4.1 shared file system for user uploads. A solutions architect must design a fully managed, secure, and scalable containerized solution without infrastructure provisioning. Which solution meets these requirements?
Deploy the CMS containers using Amazon ECS with the Fargate launch type. Configure Amazon EFS for shared storage. Specify the EFS file system ID, container mount point, and EFS access point IAM role in the ECS task definition.
Deploy the CMS containers using Amazon ECS with the Fargate launch type. Use Amazon FSx for Windows File Server for shared storage. Reference the FSx file system ID, container mount point, and FSx authorization IAM role in the ECS task definition.
Deploy the CMS containers using Amazon ECS with the EC2 launch type and auto scaling. Use Amazon EFS for shared storage. Mount the EFS file system on EC2 instances. Add the EFS IAM role to the EC2 instance profile.
Deploy the CMS containers using Amazon ECS with the EC2 launch type and auto scaling. Use Amazon S3 for shared storage. Mount the S3 bucket via a third-party file gateway and reference it in the ECS task definition.
Explanation
Answer A is correct because:
- Amazon ECS with Fargate eliminates the need to manage EC2 instances, ensuring a fully managed and scalable container environment.
- Amazon EFS is a fully managed NFS 4.1-compliant file system, meeting the CMS's shared storage requirement.
- The ECS task definition securely integrates EFS using an IAM role and access point, ensuring proper permissions and scalability.
Other options are incorrect because:
- B: FSx for Windows uses SMB, not NFS 4.1.
- C: EC2 launch type requires infrastructure management, violating the 'no provisioning' requirement.
- D: S3 is object storage (not NFS 4.1) and requires a third-party gateway, adding complexity.
Key Points: Use Fargate for serverless containers and EFS for NFS 4.1 shared storage. Avoid solutions requiring EC2 management or incompatible protocols.
Answer
The correct answer is: A