AWS EKS Terraform module

Upstream version 21.23.0
7 controls from PCI DSS v4.0 requirements

Terraform Module Source

pcidssv40.compliance.tf/terraform-aws-modules/eks/aws
ComplianceInputsOutputsResourcesDiff (2)README
Log group retention period should be at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
AWS EC2 launch templates should not assign public IPs to network interfaces
ec2_launch_template_not_publicly_accessible
Framework requirement
EKS clusters should have control plane audit logging enabled
eks_cluster_control_plane_audit_logging_enabled
Framework requirement
EKS clusters endpoint should restrict public access
eks_cluster_endpoint_restrict_public_access
Framework requirement
EKS clusters should be configured to have kubernetes secrets encrypted using KMS
eks_cluster_secrets_encrypted
Framework requirement
Log group encryption at rest should be enabled
log_group_encryption_at_rest_enabled
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement