AWS Fargate / AWS App Runner
Serverless compute engine for containers on Amazon ECS/EKS, and turnkey automated web app hosting via App Runner.
Serverless compute engine for containers on Amazon ECS/EKS, and turnkey automated web app hosting via App Runner.
Coming from Google Cloud?
Both offer serverless container platforms where developers deploy container images without managing nodes or clusters.
- Deploy standard OCI/Docker container images with zero underlying server maintenance.
- Pay only for the CPU and memory consumed during task execution.
- Automatic HTTPS endpoints, health checks, and horizontal autoscaling based on incoming traffic.
- Scale to Zero: Cloud Run scales down to 0 instances and bills in 100ms increments; Fargate maintains running tasks (App Runner scales to memory-only pause).
- Ecosystem: Fargate runs as a compute engine under Amazon ECS or EKS; Cloud Run is a standalone managed service based on Knative.
- Networking: Fargate tasks consume native VPC private IPs directly; Cloud Run uses Serverless VPC Access Connectors.
What is AWS Fargate / AWS App Runner?
AWS Fargate is a serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS). Fargate allocates exact vCPU and memory per task and runs each container inside an isolated Firecracker microVM. AWS App Runner builds upon this foundation, offering a turnkey fully managed service that automatically builds, deploys, load-balances, and scales web applications directly from code or container images.
Decision Guide: When to Choose This Service
Use AWS Fargate when you want to run containerized microservices, event-driven queues, or background workers without managing EC2 instances, patching AMIs, or sizing clusters. Use AWS App Runner for public web applications and APIs needing automatic TLS and load balancing.
Do NOT use Fargate if you need low-level kernel tuning, custom host daemons (DaemonSets without sidecars), GPU accelerators (use EC2 GPU), or sub-millisecond container startup where cold starts matter.
Core Architectural Pillars
Eliminates EC2 server provisioning, cluster sizing, and OS security patching.
Hardware-level virtualization isolation between container tasks.
Every container task receives its own private VPC IP address and dedicated ENI.
Task Execution Role (bootstrap, ECR image pull, secrets) vs. Task Role (application runtime S3/DynamoDB permissions).
Run interruptible container workloads at up to 70% discount with a 2-minute SIGTERM termination warning.