BOLSTERING SECURITY & AUTOMATING MANAGEMENT OF TARGET AUSTRALIA’S EKS CLUSTERS

Summary from the TLDR InfoSec newsletter

This post from Target Australia details the decisions and migrations that it made to improve scalability and security in its EKS clusters. Target Australia moved from manually security-hardening Amazon Linux AMIs to using BottleRocket OS-based AMIs and adopted Karpenter (running on Fargate) to replace Cluster Autoscaler to replace AutoScaling Group-based compute with EC2-based compute for its clusters.