EKS Control Plane Access is Not Restricted

Overview

EKS Cluster plane is checked if it has restricted access. Restricted access to the Kubernetes API server should be enabled to ensure API communication stays within our VPC. Endpoint access and access cidrs are specifically checked.

Vendor

AWS

Cloud Service

EKS

Related Requirements

Related Controls

References

https://docs.aws.amazon.com/eks/latest/APIReference/API_Cluster.html, https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html, https://docs.aws.amazon.com/eks/latest/APIReference/API_VpcConfigResponse.html

Severity

3

Item Types

AWS::EKS::Cluster