PageSourceSearch

https://eksworkshop.com/docs/security/

html eksworkshop.com collected 2026-10-02 04:37:52 UTC 20,717 bytes, 17 lines download raw bytes

1<!doctype html>
2<html lang="en" dir="ltr" class="docs-wrapper plugin-docs plugin-id-default docs-version-current docs-doc-page docs-doc-id-security/index" data-has-hydrated="false">
3<head>
4<meta charset="UTF-8">
5<meta name="generator" content="Docusaurus v3.4.0">
6<title data-rh="true">Security | Amazon EKS Workshop</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:image" content="https://www.eksworkshop.com/img/meta.jpg"><meta data-rh="true" name="twitter:image" content="https://www.eksworkshop.com/img/meta.jpg"><meta data-rh="true" property="og:url" content="https://www.eksworkshop.com/docs/security/"><meta data-rh="true" property="og:locale" content="en"><meta data-rh="true" property="og:locale:alternate" content="ja"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="google-site-verification" content="aRMa1ddI7Lc-CtAWPgifuH7AhmyC1CVAEpg2d9jyTpQ"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Security | Amazon EKS Workshop"><meta data-rh="true" name="description" content="Security at AWS is the highest priority, and is a shared responsibility between AWS and our customers. When using a managed service like Amazon EKS, AWS is responsible for security &quot;of&quot; the cloud whereas you, the customer, are responsible for security &quot;in&quot; the cloud."><meta data-rh="true" property="og:description" content="Security at AWS is the highest priority, and is a shared responsibility between AWS and our customers. When using a managed service like Amazon EKS, AWS is responsible for security &quot;of&quot; the cloud whereas you, the customer, are responsible for security &quot;in&quot; the cloud."><link data-rh="true" rel="icon" href="/img/favicon.png"><link data-rh="true" rel="canonical" href="https://www.eksworkshop.com/docs/security/"><link data-rh="true" rel="alternate" href="https://www.eksworkshop.com/docs/security/" hreflang="en"><link data-rh="true" rel="alternate" href="https://www.eksworkshop.com/ja/docs/security/" hreflang="ja"><link data-rh="true" rel="alternate" href="https://www.eksworkshop.com/docs/security/" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.07a53554.css">
7<script src="/assets/js/runtime~main.c55cf7e9.js" defer="defer"></script>
vendor: 1 bytes, line 7
7
8<script src="/assets/js/main.f51f9be6.js" defer="defer"></script>
8
9</head>
10<body class="navigation-with-keyboard">
11<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){try{return new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(t){}}()||function(){try{return window.localStorage.getItem("theme")}catch(t){}}();t(null!==e?e:"light")}(),function(){try{const n=new URLSearchParams(window.location.search).entries();for(var[t,e]of n)if(t.startsWith("docusaurus-data-")){var a=t.replace("docusaurus-data-","data-");document.documentElement.setAttribute(a,e)}}catch(t){}}()</script>
11<div id="__docusaurus"><div role="region" aria-label="Skip to main content"><a class="skipToContent_oPtH" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/logo.svg" alt="Amazon Web Services" class="themedComponent_siVc themedComponent--light_hHel"><img src="/img/logo.svg" alt="Amazon Web Services" class="themedComponent_siVc themedComponent--dark_yETr"></div><b class="navbar__title text--truncate">EKS Workshop</b></a><a class="navbar__item navbar__link" href="/docs/introduction/">Intro</a><a class="navbar__item navbar__link" href="/docs/fundamentals/">Fundamentals</a><a class="navbar__item navbar__link" href="/docs/observability/">Observability</a><a aria-current="page" class="navbar__item navbar__link navbar__link--active" href="/docs/security/">Security</a><a class="navbar__item navbar__link" href="/docs/networking/">Networking</a><a class="navbar__item navbar__link" href="/docs/automation/">Automation</a><a class="navbar__item navbar__link" href="/docs/aiml/">AI/ML</a><a class="navbar__item navbar__link" href="/docs/troubleshooting/">Troubleshooting</a></div><div class="navbar__items navbar__items--right"><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link" href="/docs/security/"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_kvP7"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/docs/security/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/ja/docs/security/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="ja">日本語</a></li></ul></div><a href="https://github.com/aws-samples/eks-workshop-v2" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link header-github-link" aria-label="GitHub repository"></a><div class="toggle_ki11 colorModeToggle_Hewu"><button class="clean-btn toggleButton_MMFG toggleButtonDisabled_Uw7m" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_lgto"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_U96C">
11<path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div><div class="navbarSearchContainer_bzqh"><div class="navbar__search"><span aria-label="expand searchbar" role="button" class="search-icon" tabindex="0"></span><input id="search_input_react" type="search" placeholder="Loading..." aria-label="Search" class="navbar__search-input search-bar" disabled=""></div></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div class="secondaryNavContainer_K2L9"><div class="navSection_b6UW"><a href="/docs/introduction">Intro</a><a href="/docs/fundamentals">Fundamentals</a><a href="/docs/observability">Observability</a><a class="activeLink_Jli9" href="/docs/security">Security</a><a href="/docs/networking">Networking</a><a href="/docs/automation">Automation</a><a href="/docs/aiml">AI/ML</a><a href="/docs/troubleshooting">Troubleshooting</a></div><div class="contextSwitcher_FwUU"><a href="/docs/fastpaths/setup">Switch to Essentials →</a></div></div><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_MB5r"><div class="docsWrapper__sE8"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_iEvu" type="button"></button><div class="docRoot_DfVB">
11<aside class="theme-doc-sidebar-container docSidebarContainer_c7NB"><div class="sidebarViewport_KYo0"><div class="sidebar_CUen"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_jmj1"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/docs/security/"><div class="category-wrapper"><div style="flex:1">Security</div><div><span></span><span></span><span></span><span></span></div></div></a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/cluster-access-management/"><div class="category-wrapper"><div style="flex:1">Cluster Access Management API</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Cluster Access Management API&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/iam-roles-for-service-accounts/"><div class="category-wrapper"><div style="flex:1">IAM Roles for Service Accounts</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;IAM Roles for Service Accounts&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/amazon-eks-pod-identity/"><div class="category-wrapper"><div style="flex:1">Amazon EKS Pod Identity</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Amazon EKS Pod Identity&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/secrets-management/"><div class="category-wrapper"><div style="flex:1">Secrets Management</div><div><span></span><span></span><span></span><span></span></div></div></a><button aria-label="Collapse sidebar category &#x27;Secrets Management&#x27;" aria-expanded="true" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/docs/security/secrets-management/exploring-secrets"><div class="category-wrapper"><div style="flex:1">Exploring Secrets</div><div><span></span><span></span><span></span><span></span></div></div></a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" tabindex="0" href="/docs/security/secrets-management/secrets-manager/"><div class="category-wrapper"><div style="flex:1">Managing secrets with AWS Secrets Manager</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Managing secrets with AWS Secrets Manager&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" tabindex="0" href="/docs/security/secrets-management/sealed-secrets/"><div class="category-wrapper"><div style="flex:1">Securing secrets using Sealed Secrets</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Securing secrets using Sealed Secrets&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/guardduty/"><div class="category-wrapper"><div style="flex:1">Amazon GuardDuty for EKS</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Amazon GuardDuty for EKS&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/pod-security-standards/"><div class="category-wrapper"><div style="flex:1">Pod Security Standards</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Pod Security Standards&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" href="/docs/security/kyverno/"><div class="category-wrapper"><div style="flex:1">Policy management with Kyverno</div><div><span class="badge lab">LAB</span><span></span><span></span><span></span></div></div></a><button aria-label="Expand sidebar category &#x27;Policy management with Kyverno&#x27;" aria-expanded="false" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_a9sJ"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_Qr34"><div class="docItemContainer_tjFy"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_T5ub" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_sfvy"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Security</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Security</h1></header><p>Security at AWS is the highest priority, and is a shared responsibility between AWS and our customers. When using a managed service like Amazon EKS, AWS is responsible for security &quot;of&quot; the cloud whereas you, the customer, are responsible for security &quot;in&quot; the cloud.</p>
12<p>In this chapter, we&#x27;ll explore various aspects of Amazon EKS related to security. To learn more about security with EKS refer to the <a href="https://aws.github.io/aws-eks-best-practices/security/docs/" target="_blank" rel="noopener noreferrer">
12EKS Best Practices Guide</a>.</p>
13<p><img decoding="async" loading="lazy" alt="Shared Responsibility" src="/assets/images/managed-nodegroups-8ca02010d8b9bebc575249e812baecb4.webp" width="800" height="397" class="img_SS3x"></p>
14<hr>
15<p><img decoding="async" loading="lazy" alt="Shared Responsibility" src="/assets/images/selfmanaged-nodegroups-3e12d8e254d9f4a0a996de70f72132a4.webp" width="800" height="397" class="img_SS3x"></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="row margin-top--sm theme-doc-footer-edit-meta-row"><div class="col"><a href="https://github.com/aws-samples/eks-workshop-v2/tree/main/website/docs/security/index.md" target="_blank" rel="noopener noreferrer" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_bHB7" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_ydrU"></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--next" href="/docs/security/cluster-access-management/"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Access Management API</div></a></nav></div></div></div></div></main></div></div></div><footer class="footer"><div class="container container-fluid"><div class="row footer__links"><div class="col footer__col"><div class="footer__title">Community</div><ul class="footer__items clean-list"><li class="footer__item"><a href="https://github.com/aws-samples/eks-workshop-v2" target="_blank" rel="noopener noreferrer" class="footer__link-item">GitHub<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPrP"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div><div class="col footer__col"><div class="footer__title">Other</div><ul class="footer__items clean-list"><li class="footer__item"><a href="https://aws.amazon.com/terms/?nc1=f_pr" target="_blank" rel="noopener noreferrer" class="footer__link-item">Site Terms<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPrP"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li class="footer__item"><a href="https://aws.amazon.com/privacy/?nc1=f_pr" target="_blank" rel="noopener noreferrer" class="footer__link-item">Privacy<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPrP"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div></div><div class="footer__bottom text--center"><div class="footer__copyright">© 2026, Amazon Web Services, Inc. or its affiliates. All rights reserved.</div></div></div></footer>
15<script defer="" src="https://static.cloudflareinsights.com/beacon.min.js" data-cf-beacon="{&quot;token&quot;: &quot;dfe42caedbe24f02b8d8020bbf376ad3&quot;}"></script>
15</div>
16</body>
17</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.