← Wiki

EKS Security

Resources for securing Amazon Elastic Kubernetes Service

AWS Sep 2024 (edited Dec 2024)

Guides

• AWS EKS Best Practices Guide - Security
• EKS Security Best Practices

Tools

• aquasecurity/trivy - Vulnerability scanner for containers
• bridgecrewio/checkov - IaC security scanning

Topics

• Pod Security Standards
• IRSA (IAM Roles for Service Accounts)
• Network Policies
• Secrets management with AWS Secrets Manager
• Private cluster endpoints