Skip to main content

AWS Features Matrix

Platform Component Compatibility​

ComponentStatusAWS ServiceImplementationEstimated Time
Kubernetes✅ AvailableAmazon EKSManaged control plane + worker nodes<15min
Ingress✅ AvailableApplication Load BalancerAWS Load Balancer Controller<5min
DNS✅ AvailableRoute53External-DNS integration<5min
Secrets✅ AvailableAWS Secrets ManagerExternal Secrets Operator<5min
Storage✅ AvailableEBS (gp3/io2) + EFSCSI drivers with dynamic provisioning<2min
Container Registry✅ AvailableAmazon ECRPrivate Docker registry<5min
Identity✅ AvailableIRSA (IAM Roles for Service Accounts)OIDC integration<10min
Networking✅ AvailableVPC + IstioPrivate clusters with service mesh<15min
Monitoring✅ AvailableCloudWatch + PrometheusContainer Insights + Grafana<10min
Logging✅ AvailableCloudWatch LogsFluent Bit integration<5min

Security Features​

FeatureStatusImplementationNotes
IRSA✅ ProductionIAM Roles for Service AccountsNo access keys needed
Private Clusters✅ ProductionEKS private endpointControl plane not internet-accessible
Network Policies✅ ProductionKubernetes network policiesMicro-segmentation
Pod Security✅ ProductionPod Security StandardsRestricted by default
Secrets Management✅ ProductionSecrets Manager + ESOExternal secrets sync
Image Scanning✅ ProductionECR vulnerability scanningContainer security analysis
CloudTrail✅ ProductionAPI audit loggingFull AWS API audit trail
GuardDuty🚧 OptionalThreat detectionKubernetes runtime protection

Deployment Options​

Deployment TypeStatusConfigurationUse Case
Development✅ AvailableSingle-AZ, Spot instancesCost-optimized testing
Staging✅ AvailableMulti-AZ, On-Demand nodesPre-production validation
Production✅ AvailableMulti-AZ, mixed instance typesHigh availability
Multi-Region🚧 PlannedCross-region EKS clustersDisaster recovery

AWS-Specific Advantages​

🚀 Performance​

  • Graviton2/3 processors: ARM-based cost optimization
  • Enhanced networking: Up to 100 Gbps network performance
  • NVMe SSD storage: High IOPS persistent volumes
  • Placement groups: Optimize network latency

💰 Cost Optimization​

  • Spot instances: Up to 70% cost reduction
  • Fargate: Serverless containers (no node management)
  • Reserved capacity: Long-term cost savings
  • Savings Plans: Flexible pricing models

🔗 Integration​

  • 200+ AWS services: Native cloud integration
  • VPC Endpoints: Private service access
  • CloudWatch: Comprehensive monitoring
  • Systems Manager: Configuration management

🛡️ Security​

  • IRSA: Secure pod-to-AWS authentication
  • VPC security: Network isolation
  • IAM fine-grained access: Principle of least privilege
  • Encryption everywhere: At-rest and in-transit

Regional Availability​

RegionStatusLatencyAvailability ZonesNotes
us-east-1✅ RecommendedLow6 AZsLargest service catalog
us-east-2✅ AvailableLow3 AZsAlternative US region
us-west-2✅ AvailableLow4 AZsWest coast deployment
eu-west-1✅ AvailableMedium3 AZsEU data residency
ap-southeast-1✅ AvailableHigh3 AZsAPAC deployment

Instance Type Recommendations​

Development Environments​

WorkloadInstance TypevCPUMemoryCost/Month*
Light developmentt3.medium24 GB~$30
Standard developmentt3.large28 GB~$60
Heavy developmentm5.large28 GB~$70

Production Environments​

WorkloadInstance TypevCPUMemoryCost/Month*
General purposem5.large28 GB~$70
CPU intensivec5.xlarge48 GB~$140
Memory intensiver5.large216 GB~$120

*Pricing estimates for us-east-1, On-Demand instances

Storage Options​

Storage TypePerformanceUse CaseCost/GB/Month*
gp33,000-16,000 IOPSGeneral purpose$0.08
io2Up to 64,000 IOPSHigh performance$0.125
EFSVariableShared storage$0.30
FSx LustreHigh throughputHPC workloads$0.145

*Pricing estimates for us-east-1

Limitations & Considerations​

⚠️ Known Limitations​

  • Fargate: Limited to specific instance sizes
  • Windows containers: Additional licensing costs
  • GPU workloads: Limited instance availability in some AZs

💡 Best Practices​

  • Use IRSA for all pod-to-AWS authentication
  • Enable VPC Flow Logs for network troubleshooting
  • Implement multi-AZ deployments for production
  • Use encrypted EBS volumes by default

🔧 Optimization Tips​

  • Mix Spot and On-Demand instances (70% cost savings)
  • Use Cluster Autoscaler with multiple instance types
  • Enable EBS CSI driver for dynamic volume provisioning
  • Configure AWS Load Balancer Controller for advanced routing

Cost Estimation​

Typical Monthly Costs (us-east-1)​

Development Environment​

  • EKS Control Plane: $73
  • 2x t3.medium nodes: $60
  • Storage (50GB EBS): $4
  • Load Balancer: $18
  • Total: ~$155/month

Production Environment​

  • EKS Control Plane: $73
  • 3x m5.large nodes: $210
  • Storage (200GB EBS): $16
  • Load Balancer: $18
  • NAT Gateway: $45
  • Total: ~$362/month

Getting Started​

  1. Prerequisites: AWS account with appropriate IAM permissions
  2. Setup time: ~25 minutes for full platform deployment
  3. Required services: EKS, EC2, VPC, IAM, Route53, Secrets Manager
  4. Cost estimate: $155-400/month depending on environment type

Ready to deploy? See the AWS Setup Guide for detailed instructions.