AWS EKS – Part 33 – Bring Your Own CNI (BYOCNI) Approach
BYOCNI stands for “Bring Your Own Container Network Interface”, a feature in EKS that allows the user to install and...
AWS EKS – Part 32 – Setup Cilium CNI on EKS Clusters
Cilium is another trending Kubernetes CNI plugin, a graduated CNCF project. It is known for using eBPF in its core...
AWS EKS – Part 31 – Setup Calico CNI on EKS Clusters
AWS EKS supports almost all CNI plugins other than VPC CNI through two main methods: the chaining mode, “only few...
AWS EKS – Part 21 – Kubernetes Authentication with AWS Cognito
Kubernetes supports user authentication through OAuth2/OIDC providers, and this feature is also available in AWS EKS in addition to all...
AWS EKS – Part 20 – Authentication and Authorization with Access Entries
Access Entries is a new Authentication and Authorization method in EKS service introduced in late 2023 by AWS to allow...
AWS EKS – Part 19 – Kubernetes Authentication with IAM Roles
In the previous article, you learned how to set up Kubernetes Authentication using IAM users, but as mentioned, adding IAM...
AWS EKS – Part 18 – Kubernetes Authentication with IAM Users
In this lesson, you will learn how to add additional IAM users to EKS clusters to allow your engineers to...
AWS EKS – Part 17 – Enable Cluster Logging with CloudWatch
Infrastructure logging is an essential topic for any system, and when it comes to AWS, especially EKS, we face different...
AWS EKS – Part 16 – Enable Secrets Encryption at Rest with AWS KMS Service
Encryption At Rest, EAR, is a term referred to as encrypting data when they are stored on disk. In Kubernetes,...
AWS EKS – Part 15 – Restrict Node IMDS to Secure AWS Account Access
Instance Metadata Service, IMDS, is an AWS service allowing EC2 instances to retrieve information about themselves for automation, telemetry, etc....
AWS EKS – Part 14 – Setup EKS Pod Identities to Access AWS Resources
In late 2023, AWS introduced a new EKS feature called Pod Identities, a successor of IAM Role for Service Accounts...
AWS EKS – Part 13 – Setup IAM Roles for Service Accounts (IRSA)
IAM Roles for Service Accounts, for short IRSA, is an authentication method to authenticate to AWS to access cloud resources....