A.Alibaba Cloud provides 3 levels of security: Infrastructure, Software supply chain, and Runtime Security

B.Fur Runtime Security, ACK provides network policy based on Flannel and Terway networks

C.Security Center can defend application runtimes on ACK, and it also can detect attacks within ACK.

D.For Software Supply Chain, Alibaba Cloud provides Image Signing and Image Scanning to make docker images are secure

E.ACK supports Sandboxed containers, which provide an independent kernel to enable enhanced security isolation

F.At the Infrastructure layer, Alibaba Cloud Container Service for Kubernetes (ACK) integrates RAM to achieve authN (Authentication) and RBAC authZ (Authorization)

A.Supports heterogeneous resource management, including management of GPU, FPGA, and RDMA-enabled resources

B.Supports continuous training pipelines with composable workflow

C.All resources are free

D.Scales out to hundreds of nodes to support AI/ML model training

A.Optimized k8s scheduling dedicated for jobs running on GPU, such as make pods be tight on GPU node, provide shared GPU, GPU isolated, co-scheduling

B.All major machine learning frameworks are supported

C.Arena tool was initial develop by alibaba cloud and contribued to kubeflow

D.GPU and shared GPU utilization can NOT be monitoring in Prometheus on alibaba cloud

E.Heterogeneous computing supported

A.AnalyticDB

B.PolarDB

C.RDS

A.Sandboxed Pods provide an independent kernel to enable enhanced security isolation

B.Sandboxed Pods can be run on both ECS and ECS Bare Metal (EBM) instances

C.Sandboxed pods are a Docker runtime container type, and can run any docker image

D.Sandboxed Pods can also support multiple running containers per Pod