HOW TO CREATE A PIPELINE FOR HARDENING AMAZON EKS NODES AND AUTOMATE UPDATES

Summary from the TLDR InfoSec newsletter

A blog post from AWS Security on creating a pipeline for hardening EKS nodes. The pipeline uses EC2 Image Builder to apply the CIS benchmarks for Amazon Linux to build a custom image, then uses a State Machine to update the EKS nodes, and finally creates a Lambda function to send a weekly reminder to update if a new base image is available. A CloudFormation template is included in the post.