EKS Clusters Should Have High Availability

More Info:

EKS clusters should have a minimum of 3 nodes spread across 3 Availability Zones. Availability Zones are more highly available, fault tolerant, and scalable than traditional single or multiple data center infrastructures.

Risk Level

Low

Address

Reliability, Security

Compliance Standards

CBP

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration of EKS clusters not having high availability in AWS using AWS CLI, follow these steps:

Open the AWS CLI and ensure that you have the necessary permissions to make changes to the EKS cluster.
Check if the EKS cluster is currently configured for high availability by running the following command:
```
aws eks describe-cluster --name <cluster-name> --query "cluster.resourcesVpcConfig.endpointPublicAccess"
```
This command will return a boolean value, where true indicates that the EKS cluster is configured for high availability, and false indicates that it is not.
If the EKS cluster is not configured for high availability, you can enable it by modifying the cluster’s endpoint access configuration using the following command:
```
aws eks update-cluster-config --name <cluster-name> --resources-vpc-config endpointPublicAccess=true
```
This command will modify the EKS cluster’s endpoint access configuration to enable high availability.
Verify that the EKS cluster is now configured for high availability by running the describe-cluster command again and checking the endpointPublicAccess value.
```
aws eks describe-cluster --name <cluster-name> --query "cluster.resourcesVpcConfig.endpointPublicAccess"
```
This command should now return true, indicating that the EKS cluster is configured for high availability.
Repeat these steps for any other EKS clusters that are not configured for high availability.

By following these steps, you can remediate the misconfiguration of EKS clusters not having high availability in AWS using AWS CLI.

Using Python

To remediate the misconfiguration of EKS Clusters not having high availability in AWS using Python, follow the steps below:

Import the necessary AWS SDK modules in Python:

import boto3
from botocore.exceptions import ClientError

Create a boto3 EKS client object:

eks_client = boto3.client('eks')

Get the EKS cluster name for which you want to enable high availability:

cluster_name = 'your-cluster-name'

Check if the EKS cluster is already highly available:

try:
    response = eks_client.describe_cluster(name=cluster_name)
    if response['cluster']['resourcesVpcConfig']['subnetIds']:
        print('EKS cluster is already highly available.')
    else:
        print('EKS cluster is not highly available.')
except ClientError as e:
    print('Error:', e)

If the EKS cluster is not highly available, update the cluster configuration to enable high availability:

try:
    eks_client.update_cluster_config(
        name=cluster_name,
        resourcesVpcConfig={
            'subnetIds': ['subnet-xxxxxxxx', 'subnet-yyyyyyyy', 'subnet-zzzzzzzz']
        }
    )
    print('EKS cluster configuration updated to enable high availability.')
except ClientError as e:
    print('Error:', e)

Note: Replace ‘subnet-xxxxxxxx’, ‘subnet-yyyyyyyy’, ‘subnet-zzzzzzzz’ with the IDs of the subnets in which you want to launch your EKS worker nodes. These subnets should be in different availability zones to enable high availability.

Verify that the EKS cluster is now highly available:

try:
    response = eks_client.describe_cluster(name=cluster_name)
    if response['cluster']['resourcesVpcConfig']['subnetIds']:
        print('EKS cluster is now highly available.')
    else:
        print('EKS cluster is still not highly available.')
except ClientError as e:
    print('Error:', e)

With these steps, you can remediate the misconfiguration of EKS clusters not having high availability in AWS using Python.

Additional Reading:

https://docs.aws.amazon.com/eks/latest/userguide/disaster-recovery-resiliency.html

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

EKS Clusters Should Have High Availability

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading:

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

​Additional Reading:

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading: