Endpoints Should Not Be Publicly Accessible

​

More Info:

Your Amazon EKS cluster API server endpoints should not be publicly accessible from the Internet in order to avoid exposing private data and minimizing security risks. The level of access to your Kubernetes API server endpoints depends on your EKS application use cases. It is recommended that the API server endpoints should be accessible only from within your AWS VPC.

​

Risk Level

Medium

​

Address

Security

​

Compliance Standards

PCIDSS, HIPAA, GDPR, MAS, APRA

​

Additional Reading:

• https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html