AWS EKS Essentials: A Comprehensive Guide to Setting Up, Securing, and Scaling EKS Clusters

Master the essential tools of Amazon Elastic Kubernetes Service (EKS) and explore the various architecture options. This book offers a deep dive into setting up, managing, and scaling your Kubernetes clusters on AWS.

You’ll start by exploring various architecture options, including private-only, public and hybrid endpoint configuration alternatives. The focus then shifts to security and cluster implementation with Terraform covering the three cluster configuration alternatives, role assignments, node security, and more. The book also dives into pod density providing practical demonstrations of IP address management in EKS and shows you how to customize cluster node groups with launch templates. Complete your journey by reviewing advanced EKS concepts such as auto scaling Karpenter, service mesh, and application networking with VPC Lattice.

With AWS EKS Essentials as your guide, you’ll maintain robust cluster security and strong access control, ensuring your applications run smoothly and efficiently in a cloud-native environment.

What You Will Learn

• Handle role assignments and node security
• Secure EKS clusters with private endpoints, security groups and bastion hosts.
• Run applications in Kubernetes, including Docker Desktop installation
• Optimize custom container images and manage private repositories
• Implement service mesh and application networking with AWS App Mesh, Istio, and VPC Lattice
• Create and deploy EKS clusters with Terraform

Who This Book Is For

Software developers, system administrators, and cloud enthusiasts who are looking to master EKS.

Ebenezer Paintsil is a seasoned cybersecurity architect based in Langhus, Norway. With over 13 years of experience, he specializes in risk governance, compliance, and cloud security. Ebenezer has worked with leading organizations like Telenor and Schibsted ASA, developing robust security architectures and fostering cybersecurity cultures. He holds a PhD in Information Security from NTNU Gjøvik and multiple certifications, including SABSA and AWS Security Specialty. His expertise spans AWS, Google Cloud, and various risk management frameworks.