AWS Containers: State of the Union

2025/9/9 に開催された「第44回 JAWS-UG札幌 勉強会」の投影資料です。

Transcript

1. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS Containers: State of the Union 落⽔ 恭介（Ochimizu Kyosuke) Containers Specialist Solutions Architect Amazon Web Services Japan G.K.
2. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 2 ⾃⼰紹介 落⽔ 恭介 (Ochimizu Kyosuke) コンテナスペシャリストソリューションアーキテクト Ø SIer Ø 教育業界ベンチャー Ø Cloud Integrator Ø サポートチーム / アマゾン ウェブ サービス ジャパン Ø 現在のロール 好きな AWS サービス: AWS Fargate @otty246
3. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 3 アジェンダ • AWS コンテナサービスの全体像 • コンテナサービスアップデートの歴史 • Amazon ECS / Amazon EKS の最新動向
4. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS コンテナサービスの全体像 4
5. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 5 AWS でコンテナを実⾏する際のオプション 統合ソリューション オーケストレーション キャパシティ お客様管理のインフラストラクチャ Server Edge イメージレジストリ Amazon Elastic Container Registry (Amazon ECR) Amazon Elastic Container Service (Amazon ECS) Amazon Elastic Kubernetes Service (Amazon EKS) Red Hat OpenShift Service on AWS (ROSA) Amazon Elastic Compute Cloud (Amazon EC2) AWS Fargate AWS Outposts Family AWS Lambda Amazon Lightsail AWS Amplify AWS Batch AWS App Runner AWS Elastic Beanstalk AWS IoT Greengrass
6. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 6 コンテナ関連サービス AWS Step Functions Amazon EventBridge Amazon Simple Notification Service (Amazon SNS) Amazon Simple Queue Service (Amazon SQS) AWS AppSync Amazon VPC Lattice Amazon API Gateway ECS Service Connect AWS PrivateLink Elastic Load Balancing アプリケーション統合 ネットワーキング
7. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 7 アーキテクチャ例: Amazon ECS の場合 AWS Cloud Developers Amazon ECR AWS Secrets Manager AWS Identity and Access Management (IAM) Amazon CloudWatch Application Load Balancer AWS CodePipeline Application Networking Amazon ECS Amazon EC2 AWS Fargate AWS CloudFormation Users AWS CodeBuild コード リポジトリ Build ECS デプロイ アクション Deploy Observe Secure Run
8. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. コンテナサービス アップデートの歴史 8
9. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 9 コンテナサービスの歴史 2014 2015 Amazon ECS Docker 1.0 Kubernetes 1.0 Amazon ECR 2017 AWS Fargate 2018 Amazon EKS 2021 AWS App Runner ROSA
10. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 10 ECS の登場から現代までを振り返ってみよう 2014 2015 Amazon ECS Docker 1.0 Kubernetes 1.0 Amazon ECR 2017 AWS Fargate 2018 Amazon EKS 2021 AWS App Runner ROSA
11. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 11 Elastic Beanstalk でコンテナサポートを開始 2014 AWS Elastic Beanstalk for Docker | AWS News Blog https://aws.amazon.com/jp/blogs/aws/aws-elastic-beanstalk-for-docker/ • Elastic Beanstalk に Docker プラットフォームが追加される Ø Amazon ECS の発表よりも先に登場 • Elastic Beanstalk がコントロールプレーンとなり EC2 上の Docker でコンテナを実⾏ Ø 2015 年になると、ECS を下回りに利⽤した マルチコンテナプラットフォームが登場
12. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 12 Amazon ECS を発表 Amazon EC2 Container Service (ECS) – Container Management for the AWS Cloud | AWS News Blog https://aws.amazon.com/jp/blogs/aws/cloud-container-management/ • re:Invent 2014 にて Amazon ECS の プレビューが発表される Ø 2015 年に⼀般提供を開始 • 発表当時のサービス名称は Amazon EC2 Container Service (ECS) Ø その後、現在のサービス名称である Amazon Elastic Container Service に改名 2014
13. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 13 Amazon ECR の⼀般提供を開始 EC2 Container Registry – Now Generally Available | AWS News Blog https://aws.amazon.com/jp/blogs/aws/ec2-container-registry-now-generally-available/ • re:Invent 2015 にて Amazon ECR が発表される Ø 発表後の 2015 年 12 ⽉に⼀般提供を開始 Ø [補⾜] re:Invent 2015 は 10/6 - 10/9 に開催 • 発表当時のサービス名称は Amazon EC2 Container Registry (ECR) Ø その後、現在のサービス名称である Amazon Elastic Container Registry に改名 2015
14. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 14 AWS Batch の発表 AWS Batch – AWSでバッチ処理ジョブを実⾏する | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/aws-batch-run-batch-computing-jobs-on-aws/ • re:Invent 2016 にて AWS Batch が発表される Ø 発表当初はプレビュー Ø 2017 年に⼀般提供開始 2016
15. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 15 AWS Fargate の⼀般提供を開始 AWS Fargate の紹介 https://aws.amazon.com/jp/about-aws/whats-new/2017/11/introducing-aws-fargate-a-technology-to-run-containers-without-managing-infrastructure/ • re:Invent 2017 にて AWS Fargate が発表される Ø 発表と同時に⼀般提供を開始 • 当初は ECS での利⽤をサポート 2017
16. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 16 Amazon EKS を発表 Amazon Elastic Container Service for Kubernetes | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/amazon-elastic-container-service-for-kubernetes/ • re:Invent 2017 にて Amazon EKS の プレビューが発表される Ø 2018 年に⼀般提供を開始 • 発表当時のサービス名称は Amazon Elastic Container Service for Kubernetes (EKS) Ø その後、⼀般提供開始時に現在の名称である Amazon Elastic Kubernetes Service に改名 2017
17. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 17 AWS App Mesh を発表 AWS のマイクロサービスのための サービスメッシュ - AWS App Mesh のご紹介 https://aws.amazon.com/jp/about-aws/whats-new/2018/11/introducing-aws-app-mesh---service-mesh-for-microservices-on-aws/ • re:Invent 2018 にて AWS App Mesh の プレビューが発表される Ø 2019 年に⼀般提供を開始 2018
18. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 18 AWS Cloud Map の⼀般提供を開始 AWS Cloud Map:アプリケーションのカスタムマップの簡単な作成と維持 | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/aws-cloud-map-easily-create-and-maintain-custom-maps-of-your-applications/ • re:Invent 2018 にて AWS Cloud Map が発表される Ø 発表と同時に⼀般提供を開始 • Route 53 Auto Naming API の機能を拡張した形で リリースされた Ø そのため、Cloud Map のサービスエンドポイントに Auto Naming API の⾯影が残っている Ø 例) servicediscovery.ap-northeast-1.amazonaws.com 2018
19. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 19 EKS on Fargate の⼀般提供を開始 AWS Fargate 上の Amazon EKS を⼀般公開 | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/amazon-eks-on-aws-fargate-now-generally-available/ • re:Invent 2019 で Fargate の EKS サポートを発表 Ø 発表と同時に⼀般提供を開始 2019
20. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 20 Red Hat OpenShift Service on AWS を発表 AWS と Red Hat がコラボレーションを拡⼤: 新たに提供する AWS でのマネージド Red Hat OpenShift サービスを発表 | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/aws-and-red-hat-extend-collaboration-annoucing-new-managed-red-hat-openshift-service-on-aws/ • Red Hat OpenShift Service on AWS (ROSA) を発表 Ø この時点では発表のみ Ø 2020 年 11 ⽉からプレビューを提供 Ø その後、2021 年に⼀般提供を開始 2020
21. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 21 Bottlerocket の⼀般提供を開始 Announcing the General Availability of Bottlerocket, a new open source Linux-based operating system purpose-built to run containers https://aws.amazon.com/about-aws/whats-new/2020/08/announcing-general-availability-of-bottlerocket/ • オープンソースの Linux ディストリビューションである Bottlerocket の⼀般提供を開始 Ø EKS AMI が⼀般提供、ECS AMI がプレビュー Ø ECS AMI は 2021 年に⼀般提供を開始 2020
22. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 22 Amazon ECR Public の⼀般提供を開始 Amazon Elastic Container Registry Public: A New Public Container Registry | AWS News Blog https://aws.amazon.com/jp/blogs/aws/amazon-ecr-public-a-new-public-container-registry/ • re:Invent 2020 の期間中に ECR Public の⼀般提供を開始 • Docker Hub のイメージプル制限の変更を受け、 事前（11 ⽉時点）にアナウンスがされていた 2020
23. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 23 AWS Lambda でコンテナイメージをサポート AWS Lambda の新機能 – コンテナイメージのサポート | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/new-for-aws-lambda-container-image-support/ • re:Invent 2020 で Lambda のコンテナサポートが発表 Ø 発表時点で⼀般提供を開始 2020
24. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 24 AWS App Runner の⼀般提供を開始 AWS App Runner のご紹介 | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/introducing-aws-app-runner/ • AWS App Runner の⼀般提供を開始 2021
25. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 25 Karpenter の⼀般提供を開始 Introducing Karpenter – An Open-Source High-Performance Kubernetes Cluster Autoscaler | AWS News Blog https://aws.amazon.com/jp/blogs/aws/introducing-karpenter-an-open-source-high-performance-kubernetes-cluster-autoscaler/ • re:Invent 2021 で Karpener の⼀般提供を開始 Ø ⼀般提供開始（GA）だが、API バージョンは Alpha ステータスでの提供だった Ø 後に 2023 年に Beta に昇格、2024 年に Beta を卒業（Stable） 2021
26. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 26 Finch を発表 コンテナ開発⽤のオープンソースクライアント「Finch」のご紹介 | Amazon Web Services ブログ https://aws.amazon.com/jp/blogs/news/introducing-finch-an-open-source-client-for-container-development/ • オープンソースのコンテナ開発クライアントである Finch を発表 Ø v0.1.0 で公開 Ø 後に 2023 年に v1.0.0 をリリース 2022
27. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 27 Amazon VPC Lattice を発表 Introducing VPC Lattice – Simplify Networking for Service-to-Service Communication (Preview) | AWS News Blog https://aws.amazon.com/jp/blogs/aws/introducing-vpc-lattice-simplify-networking-for-service-to-service-communication-preview/ • re:Invent 2022 で Amazon VPC Lattice を発表 Ø 発表当時はプレビュー Ø 後に 2023 年に⼀般提供を開始 2022
28. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon ECS / Amazon EKS の 最新動向 28
29. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 29 Amazon ECS & AWS Fargate の歩み (1) 2015 2017 2018 2019 2020 2016 2021 ECS Generally Available ELB Integration Auto Scaling Support ECR Generally Available Dynamic Port Mapping Windows Container Support (Beta) Task IAM Role awslogs Driver Support ECS Service Scheduler UDP Support Events Stream for EventBridge ECS Scheduled Tasks Faragte Generally Available Windows Container GA awsvpc Network Mode Container Instance Draining Target Tracking Policy ECS Service Discovery ECS Blue/Green Deployment Fargate Region Expansion (Tokyo) Task Metadata Endpoint Secret Support Fargate Price Reduction GPU Workload FireLens Support ECS Cluster on AWS Outposts PrivateLink support Capacity Providers Fargate Spot Graviton2 Support Bottlerocket Support Canary and Linear Deployment Fargate Platform Version 1.4.0 AWS Copilot CLI 0.1.0 Release Local Zones and Wavelength Zones IPv4 / IPv6 Dual-stack EFS file system Support ECS Exec Amazon ECS Anywhere Fargate Windows Container Fargate Graviton2 Support ECS-optimized AMI Build Script
30. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 30 Amazon ECS & AWS Fargate の歩み (2) 2021 2023 2024 2025 2022 ECS-A Windows Support ECS Service Connect New Fargate Task Size (16 vCPU 120 GiB) EC2 Auto Scaling Warm Pools New ECS Console Experience Updated ECS Exec Amazon ECS Anywhere Fargate Windows Container Fargate Graviton2 Support ECS-optimized AMI Build Script New ECS Console is Default Compute Optimizer supports Fargate Task Definition Deletion AL2023 based ECS-optimized AMI Task-level CUR Data Seekable OCI Support GuardDuty Runtime Monitoring EBS Volume Support Service Connect TLS Support ECS Managed Draining Container Image Resolution Container Restart Policy Fargate Spot (Graviton) VPC Lattice Integration ECS Built-in Blue/Green Deployment Non-blocking Logging Mode as Default Stopping Service Deployment Seekable OCI v2 ECS Exec from Console
31. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 31 Amazon ECS & AWS Fargate の歩み 2015 2017 2018 2019 2020 2016 2021 ECS Generally Available ELB Integration Auto Scaling Support ECR Generally Available Dynamic Port Mapping Windows Container Support (Beta) Task IAM Role awslogs Driver Support ECS Service Scheduler UDP Support Events Stream for EventBridge ECS Scheduled Tasks Faragte Generally Available Windows Container GA awsvpc Network Mode Container Instance Draining Target Tracking Policy ECS Service Discovery ECS Blue/Green Deployment Fargate Region Expansion (Tokyo) Task Metadata Endpoint Secret Support Fargate Price Reduction GPU Workload FireLens Support ECS Cluster on AWS Outposts PrivateLink support Capacity Providers Fargate Spot Graviton2 Support Bottlerocket Support Canary and Linear Deployment Fargate Platform Version 1.4.0 AWS Copilot CLI 0.1.0 Release Local Zones and Wavelength Zones IPv4 / IPv6 Dual-stack EFS file system Support ECS Exec Amazon ECS Anywhere Fargate Windows Container Fargate Graviton2 Support ECS-optimized AMI Build Script 2021 2023 2024 2025 2022 ECS-A Windows Support ECS Service Connect New Fargate Task Size (16 vCPU 120 GiB) EC2 Auto Scaling Warm Pools New ECS Console Experience Updated ECS Exec Amazon ECS Anywhere Fargate Windows Container Fargate Graviton2 Support ECS-optimized AMI Build Script New ECS Console is Default Compute Optimizer supports Fargate Task Definition Deletion AL2023 based ECS-optimized AMI Task-level CUR Data Seekable OCI Support GuardDuty Runtime Monitoring EBS Volume Support Service Connect TLS Support ECS Managed Draining Container Image Resolution Container Restart Policy Fargate Spot (Graviton) VPC Lattice Integration ECS Built-in Blue/Green Deployment Non-blocking Logging Mode as Default Stopping Service Deployment Seekable OCI v2 ECS Exec from Console コンピュート • EC2 / Fargate / ECS Anywhere の提供により クラウドおよびオンプレミスの幅広い ユースケースをカバー可能に • Fargate の継続的なアップデートにより適⽤可能な ワークロードが拡⼤ Ø Windows, Graviton, Spot, 16 vCPU / 120 GiB memory ネットワーク • ELB との連携のみでなく ECS Service Connect や VPC Lattice との連携もサポート ストレージ • 従来の EFS サポートに加えて、EBS サポートによる ⼤規模ファイル処理も可能に セキュリティ ・GuardDuty Runtime Monitoring による振る舞い検知
32. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 32 マネージド Kubernetes on AWS の歩み ACK Project Price reduced to $0.10 per hour Secrets Encryption SLA raised to 99.95% EKS CIS Benchmark K8s Resources in EKS console EKS on AWS Local zones EKS Add-ons Load balancer controller 2018 2020 2021 2022 2023 2019 EKS Generally Available Managed Cluster Version Updates GPU Support HIPAA eligible ISO, PCI, and SOC Compliance Expansion to 15 AWS regions CSI drivers for EBS, EFS, FSx for Lustre Pod security policies Managed Node Groups EKS Fargate EKS on AWS Outposts IPv6 clusters available Local clusters on Outposts Trainium instances Add-ons from AWS marketplace PrivateLink support Nitro enclaves Launch time reductions Expansion to 32 AWS regions Kubernetes Network Policy enforcement Extended version support Version launch acceleration Pod Identity S3 Mountpoints CSI Driver Upgrade Insights OIDC access authentication Cluster creation reduced by 40% EFA, P4d instance support EKS Anywhere GA EKS Connector FedRamp High Compliance Control plane scaling Karpenter project Amazon Linux 2023 2024 Automatic Version Upgrades Zonal Shift Full IPv6 support Auto Mode Hybrid Nodes Multi-cluster dashboard Node health & auto-repair
33. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 33 マネージド Kubernetes on AWS の歩み ACK Project Price reduced to $0.10 per hour Secrets Encryption SLA raised to 99.95% EKS CIS Benchmark K8s Resources in EKS console EKS on AWS Local zones EKS Add-ons Load balancer controller 2018 2020 2021 2022 2023 2019 EKS Generally Available Managed Cluster Version Updates GPU Support HIPAA eligible ISO, PCI, and SOC Compliance Expansion to 15 AWS regions CSI drivers for EBS, EFS, FSx for Lustre Pod security policies Managed Node Groups EKS Fargate EKS on AWS Outposts IPv6 clusters available Local clusters on Outposts Trainium instances Add-ons from AWS marketplace PrivateLink support Nitro enclaves Launch time reductions Expansion to 32 AWS regions Kubernetes Network Policy enforcement Extended version support Version launch acceleration Pod Identity S3 Mountpoints CSI Driver Upgrade Insights OIDC access authentication Cluster creation reduced by 40% EFA, P4d instance support EKS Anywhere GA EKS Connector FedRamp High Compliance Control plane scaling Karpenter project Amazon Linux 2023 2024 Automatic Version Upgrades Zonal Shift Full IPv6 support Auto Mode Hybrid Nodes Multi-cluster dashboard Node health & auto-repair コンピュート • Karpenter による強⼒なコスト最適化の推進 • EKS Anywhere / EKS Hybrid Nodes による ハイブリッドワークロードのサポート 運⽤負荷の低減 • EKS Auto Mode でアドオンやデータプレーンの 管理負荷を軽減 • 延⻑サポートや Upgrade Insights による Kubernetes バージョンアップグレードのサポート セキュリティ • IAM Access Entry / EKS Pod Identity による アクセス管理⼿法の改善 • Kubernetes Network Policy を VPC CNI Plugin が サポート
34. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. 34 [再掲] コンテナサービスの歴史 2014 2015 Amazon ECS Docker 1.0 Kubernetes 1.0 Amazon ECR 2017 AWS Fargate 2018 Amazon EKS 2021 AWS App Runner ROSA
35. © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved. Thank you! © 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.