All checks
Medium
EKS clusters should use encrypted Kubernetes secrets
Verifies that EKS clusters use AWS KMS to encrypt Kubernetes secrets stored in etcd.
- service
- EKS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To enable encrypted Kubernetes secrets for your EKS cluster, you need to configure the encryption configuration with a KMS key.
- Navigate to the Amazon EKS console
- Select your cluster
- Go to the 'Configuration' tab
- Under 'Encryption configuration', click 'Edit'
- Add a new encryption configuration for 'secrets'
- Select a KMS key for envelope encryption
- Save the configuration to enable secrets encryption
See which of your accounts this check is failing on.
Book a demo