For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-000-5q8.md. A documentation index is available at /llms.txt.

EKS clusters should run on a supported version of Kubernetes

eks

Description

This control checks whether an Elastic Kubernetes Service (EKS) cluster is operating on a Kubernetes version in standard support. Extended-support versions fail this control, matching AWS Security Hub control EKS.2. If your application doesn’t require a specific Kubernetes version, use the latest standard-support version for optimal security and performance. Refer to the Amazon EKS Kubernetes release calendar and Amazon EKS version support and FAQ for the current standard-support set.

Remediation

For guidance on updating an EKS cluster’s Kubernetes version, please refer to Updating an Amazon EKS cluster Kubernetes version in the Amazon EKS User Guide.