EKS Webhook Token Authentication

External

• https://aws.github.io/aws-eks-best-practices/iam/#controlling-access-to-eks-clusters

Internal

• Kubernetes Security Concepts
• EKS Concepts

Overview

EKS has native support for bearer tokens and webhook token authentication.

Generate a Token

For the current IAM User, associated with the current AWS_PROFILE:

aws eks get-token --cluster <cluster-name>

For an arbitrary IAM role:

aws eks get-token --cluster <cluster-name> --role <role-arn>