Securing EKS Workloads: IAM Roles, Pod Hardening, Secrets, and Policy as Code

<p>Follow Dara Okonkwo, a platform engineer at Meridian Health Analytics, as she locks down a real three-service claims-processing app running on Amazon EKS. Across four hands-on lessons you'll grant a Pod least-privilege AWS access with IAM Roles for Service Accounts and the newer EKS Pod Identity, harden Pod securityContexts against the Pod Security Standards, replace a plain base64 Kubernetes Secret with a live sync from AWS Secrets Manager via the External Secrets Operator, and write Kyverno policy-as-code rules that first audit and then enforce against privileged Pods and missing labels.</p>

Tools: kubernetes, eks, irsa, eks pod identity, security context, external secrets operator, kyverno, opa gatekeeper