EKS Cluster Access Manager API should be enabled

eks
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

Amazon EKS recommends using the Cluster Access Manager API for managing EKS cluster access, replacing the aws-auth ConfigMap. This new API simplifies Role-Based Access Control (RBAC) and Service Account management by allowing direct control via the EKS API, reducing manual configuration and the risk of errors. It also enhances security by enabling the assignment of predefined AWS-managed Kubernetes permissions to IAM principals, offering improved visibility and auditing capabilities.

Note: EKS Cluster Access Manager API is only available in EKS version 1.23 and above. Clusters running earlier EKS versions will not be assessed by this control.

Remediation

For guidance on configuring EKS cluster access, refer to the Grant IAM users and roles access to Kubernetes APIs section of the Amazon EKS User Guide.