1# Assessment: Fargate to Container Apps
2 
3## Checklist
4 
5### 1. Container Configuration
6- **CPU/Memory**: Extract from task definition and verify the requested CPU/memory fits within Azure Container Apps limits for the target environment/region
7- **Container Images**: Registry location (ECR), image size, base image
8- **Port Mappings**: Exposed ports and protocols
9 
10### 2. Environment & Secrets
11- Static configuration values (env vars)
12- Secret references: Secrets Manager ARNs → Key Vault URLs with managed identity
13- Parameter Store references → App Configuration or Key Vault
14- Service discovery endpoints
15 
16### 3. Networking
17- VPC subnets (public vs private) → VNet integration
18- Security groups → NSG rules
19- Load balancer type (ALB/NLB) → Container Apps ingress (built-in HTTPS)
20- Health check configuration and SSL/TLS certificates
21 
22### 4. IAM & Security
23- Task role policies → Managed Identity + Azure RBAC
24- ECR pull permissions → ACR role assignment (AcrPull)
25- Secrets Manager access → Key Vault RBAC (recommended) or access policies for vaults still using access-policy mode
26 
27### 5. Dependencies
28- **Databases**: RDS → Azure Database for PostgreSQL/MySQL/SQL
29- **Cache**: ElastiCache → Azure Cache for Redis
30- **Storage**: S3 → Azure Blob Storage (SDK: boto3 → azure-storage-blob)
31- **Messaging**: SQS/SNS → Service Bus / Event Grid
32- **Monitoring**: CloudWatch → Azure Monitor / Log Analytics (requires Log Analytics workspace on Container Apps environment)
33 
34### 6. Scaling & Performance
35- Auto scaling policies (target tracking, min/max tasks)
36- Request rate and latency requirements
37- Actual CPU/memory usage vs allocation
38 
39## Resource Mapping
40 
41| ECS Task Definition | Container Apps Equivalent |
42|---------------------|--------------------------|
43| `cpu: "512"` (0.5 vCPU) | `cpu: 0.5` |
44| `memory: "1024"` (MB) | `memory: 1Gi` |
45| `containerPort` | `ingress.targetPort` |
46| `environment` | `env` array |
47| `secrets` (Secrets Manager ARN) | `secrets` with `keyVaultUrl` + `identity` |
48| `logConfiguration` (awslogs) | Log Analytics (requires workspace on environment) |
49| Service Auto Scaling | `scale.rules` (HTTP/CPU/memory/custom) |
50 
51## Complexity Rating
52 
53- **Low**: Single container, no VPC, standard env vars, public ingress
54- **Medium**: Multiple containers, VPC with private connectivity, secrets, custom IAM
55- **High**: Multi-service dependencies, VPN/Direct Connect, cross-account IAM, stateful workloads
56