Amazon EKS Security Immersion Workshop

Welcome to the repository for the Amazon Elastic Kubernetes Services Security Immersion Workshop. This contains the source for the website content as well as the accompanying infrastructure-as-code to set up a workshop lab environment in your AWS account. Please review the Introduction chapter of the workshop for more details.

Introduction

The intent of this workshop is to use real-world services and demonstrate features of Amazon EKS Security showcasing end-to-end functionality of each feature from application developer and Devops/SRE persona perspective.

This workshop is the outcome of experience we had from past Immersion workshops that we did for our customers at AWS. The topics in this workshop is catered towards commonly asked Amazon EKS Security features by customers, and will help you to quickly get-started with Amazon EKS Security.

This workshop is catered towards use cases, requirement and ask that most of our customers have demanded as part of Amazon EKS Immersions done in the past.

Click on any of the topics to get more details and see relevant best practices as per Amazon EKS Best Practices Guide for Security :

• Identity and Access Management
• Pod Security
• Tenant Isolation
• Auditing and logging
• Network security
• Data encryption and secrets management
• Runtime security
• Infrastructure Security
• Regulatory Compliance
• Incident response and forensics
• Image security

Community

Contributing content

To learn how to author content on this repository, read CONTRIBUTING.md and docs/authoring_content.md.

Security

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.