For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-000-epz.md. A documentation index is available at /llms.txt.

EKS Cluster should have public access limited

eks

Description

When public access is enabled in an EKS cluster, it should be limited to a specific set of CIDRs. For security, public access should be limited to only the bare minimum set of IPs.

Remediation

  1. Use step 6 from the Modifying cluster endpoint access documentation to limit public access.