EKS Clusters should have the public access disabled
EKS clusters are available publicly by default, this should be explicitly disabled in the vpc_config of the EKS cluster resource.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Don’t enable public access to EKS Clusters
1
2
3
4
5
6
|
Resources:
EKSCluster:
Type: AWS::EKS::Cluster
Properties:
ResourcesVpcConfig:
EndpointPublicAccess: false
|
Don’t enable public access to EKS Clusters
1
2
3
4
5
6
|
resource "aws_eks_cluster" "good_example" {
name = "good_example_cluster"
vpc_config {
endpoint_public_access = false
}
}
|
Links