EKS secret encryption: cluster encryption config

Terraform argument: cluster_encryption_config doc in EKS module

Resources: secrets, configmaps

• https://github.com/terraform-aws-modules/terraform-aws-eks/blob/v17.1.0/examples/secrets_encryption/main.tf

 cluster_encryption_config = [
   {
     provider_key_arn = aws_kms_key.eks.arn
     resources        = ["secrets"]
   }
 ]

Related

• eksctl utils enable-secrets-encryption
• EncryptionConfig
• AWS KMS
• SOPs
• List of AWS Config Managed Rules

See also

• EKS security, endpoint access control, Grant access, AWS Config Security Best Practices for EKS, List of AWS Config Managed Rules
• Terraform EKS module (link): Deploy EKS cluster using Terraform, manage_aws_auth_configmap, create_aws_auth_configmap, aws_auth_roles, aws_auth_users, aws_auth_accounts, module.eks, Amazon EKS Blueprints for Terraform, OIDC, cluster_security_group_additional_rules, access_entries, eks_managed_node_groups, compute_config (Auto mode)