kubernetes security

AWS EKS – Part 21 – Kubernetes Authentication with AWS Cognito

Kubernetes supports user authentication through OAuth2/OIDC providers, and this feature is also available in AWS EKS in addition to all...

Access Entries is a new Authentication and Authorization method in EKS service introduced in late 2023 by AWS to allow...

In the previous article, you learned how to set up Kubernetes Authentication using IAM users, but as mentioned, adding IAM...

In this lesson, you will learn how to add additional IAM users to EKS clusters to allow your engineers to...

Infrastructure logging is an essential topic for any system, and when it comes to AWS, especially EKS, we face different...

Encryption At Rest, EAR, is a term referred to as encrypting data when they are stored on disk. In Kubernetes,...

Instance Metadata Service, IMDS, is an AWS service allowing EC2 instances to retrieve information about themselves for automation, telemetry, etc....

In late 2023, AWS introduced a new EKS feature called Pod Identities, a successor of IAM Role for Service Accounts...

IAM Roles for Service Accounts, for short IRSA, is an authentication method to authenticate to AWS to access cloud resources....

Some industries, like health, pharmacology, military, air force, space, government systems, etc., may be forced to run their infrastructures in...

In previous articles, we deployed our cluster and worker nodes in public subnets, but in the real world, we deploy...

So far, we deployed a cluster with a Public API Endpoint. Public Endpoint means kube-apiserver deployed by EKS can be...