Amazon EKS Security and Networking Masterclass

Create an EKS cluster with eksctl using a custom YAML config, private subnets, and a managed node group; scale nodes and verify access with kubectl.

Set up a Cloud9 development workspace to manage an ECS cluster, configure EC2, VPC and subnets, install kubectl, and manage AWS credentials securely.

Configure fine-grained iam roles for Kubernetes service accounts and pods using OpenID Connect providers and assume role with web identity, mapping roles to service accounts for secure pod access.

Enable private API server endpoint access for an EKS cluster by switching from public to private endpoints, and access from outside the VPC via a jump box and SSH tunnel.

Install Calico network policies in Kubernetes and deploy a demo app across frontend, backend, and client. Enforce default denial and selectively allow traffic with policy files to control inter-service access.

Explore pod networking with aws vpc cni in kubernetes, using ipam to allocate ips on enis, with vpc routing and no overlay for performance.

Learn how to install and manage Calico CNI on an EKS cluster, replacing the default AWS CNI, configuring IP pools, and deploying node groups with Eksctl.

Enable envelope encryption for EKS secrets by creating a KMS key and enabling secrets encryption at cluster creation, since the key cannot be changed after deployment and you manage it.

Explore pod security policy in a Kubernetes cluster, compare default and restricted policies, and learn how privilege, privilege escalation, host network access, and volumes are gated.

Demonstrates creating an ECR repository with namespaces and image scanning, enabling encryption, and configuring VPC private endpoints for API and Docker to access a private registry.

Learn CIS benchmarks for Amazon ECS and use kube bench to assess your cluster security, applying best practices for CNI, IAM roles, KMS, and image vulnerability scanning.

Enable and manage EKS control plane logs directly from the console, choosing audit and API server logs, view log groups and streams, and forward logs to your preferred monitoring tool.