Back to All Checks
Medium EKS Regional

EKS clusters should use encrypted Kubernetes secrets

NIST 800-53PCI DSS v4.0.1PCI DSS v8.3.2ISO 27001

Description

Verifies that EKS clusters use AWS KMS to encrypt Kubernetes secrets stored in etcd.

Remediation

To enable encrypted Kubernetes secrets for your EKS cluster, you need to configure the encryption configuration with a KMS key.

Steps

  1. Navigate to the Amazon EKS console
  2. Select your cluster
  3. Go to the 'Configuration' tab
  4. Under 'Encryption configuration', click 'Edit'
  5. Add a new encryption configuration for 'secrets'
  6. Select a KMS key for envelope encryption
  7. Save the configuration to enable secrets encryption

Compliance

NIST 800-53PCI DSS v4.0.1PCI DSS v8.3.2ISO 27001
Start Your Free Security Check