DEEP DIVE INTO THE NEW AMAZON EKS CLUSTER ACCESS MANAGEMENT FEATURES

Summary from the TLDR InfoSec newsletter

AWS launched a new feature of EKS called Cluster Access Management to simplify granting and managing access to EKS clusters. This new feature broadly allows managing access to an EKS cluster via the AWS API. This allows for mapping AWS identities to pre-defined AWS-managed Kubernetes permissions, mapping AWS identities to Kubernetes groups, and gaining visibility into shadow admins.