@aws-mdaa/eks-constructs
v1.3.0
Published
MDAA Eks Constructs
Downloads
50
Readme
Construct Overview
Opinionated implementation of the Layer 2 CDK Constructs for EKS ensuring compliance with CDK Nag rulesets for AWS Solutions, NIST-800-53-r5 and HIPPA.
Kubernetes Version Updates
To add support for new Kubernetes versions when AWS EKS releases them:
- Update the
versionMapingetKubectlUrl()method inlib/cluster.ts - Add new kubectl layer case in
getKubectlLayer()switch statement - Check AWS EKS supported versions for kubectl binary URLs
- Update tests to use supported versions and remove deprecated ones
- Update Kubernetes version in
packages/constructs/L3/dataops/dataops-nifi-l3-construct/lib/dataops-nifi-l3-construct.ts
Currently supported: 1.28, 1.29, 1.30, 1.31, 1.32, 1.33
Security/Compliance
EKS Cluster
- Enforce Cluster Name
- Private endpoint access only.
- Enables all cluster logging facets.
- Enforces use of KMS CMK for encryption of all Kubernetes secrets.
- Adds configured principals as admin roles
