EKS secret encryption: cluster encryption config

Terraform argument: cluster_encryption_config doc in EKS module

Resources: secrets, configmaps

• https://github.com/terraform-aws-modules/terraform-aws-eks/blob/v17.1.0/examples/secrets_encryption/main.tf

 cluster_encryption_config = [
   {
     provider_key_arn = aws_kms_key.eks.arn
     resources        = ["secrets"]
   }
 ]

Related

• eksctl utils enable-secrets-encryption
• EncryptionConfig
• AWS KMS
• SOPs

See also

• EKS security, endpoint access control, Grant access, AWS Config Security Best Practices for EKS, List of AWS Config Managed Rules
• Terraform EKS module: Deploy EKS cluster using Terraform, manage_aws_auth_configmap, create_aws_auth_configmap, aws_auth_roles, aws_auth_users, aws_auth_accounts, module.eks, Amazon EKS Blueprints for Terraform, OIDC