Quick Start Security for Amazon EKS
Thank you!
We got your information.
Coralogix Extension For Amazon EKS Includes:
Alerts - 1
Stay on top of Amazon EKS key performance metrics. Keep everyone in the know with integration with Slack, PagerDuty and more.
AWS EKS - Configmaps Across Multiple Namespaces Updated by a User
This alert detects when a user updates/deleted multiple configmaps across multiple namespaces. Impact If an attacker manages to modify or delete configmaps the corresponding workload would never get spun up and causes Denial of Service Attack. Mitigation The changes should be verified immediately and if the unauthorized changes seen then all the changes should be revert back and all other activities should be checked for the user to minimize the impact. MITRE Tactic: TA0040 MITRE Technique: T1499
Integration
Learn more about Coralogix's out-of-the-box integration with Amazon EKS in our documentation.
