Configure a SecurityGroupPolicy to apply dedicated Amazon EC2 security groups to individual Pods in EKS Auto Mode.

<p><a href="https://aws.amazon.com/pm/eks/">Amazon Elastic Kubernetes Service (Amazon EKS)</a> now offers a larger 24 GB etcd database, up from 16 GB, for 4XL and 8XL <a href="https://docs.aws.amazon.com/eks/latest/userguide/eks-provisioned-control-plane.html">Provisioned Control Plane</a> clusters. etcd is the key-value store in the Kubernetes control plane that holds your cluster state, so its size limits how many Kubernetes objects your cluster can store. With 50% more capacity, you can run bigger clusters with more pods, jobs, events, and custom resources.</p> <p>The larger database gives more headroom to workloads that create and update many Kubernetes objects, such as large-scale AI/ML training and inference, batch processing, and CI/CD pipelines. When the etcd database fills up, you can’t add or change objects in your cluster, so the extra headroom helps keep these workloads running as they scale.</p> <p>To get the larger database,&nbsp;choose the 4XL or 8XL tier of Provisioned Control Plane on a cluster running EKS version 1.34 or later. Existing clusters on the 4XL and 8XL tiers running these versions get the larger database automatically, with no action required. The 24 GB etcd database is available in all commercial AWS Regions where Provisioned Control Plane is available. To learn more, see the <a href="https://docs.aws.amazon.com/eks/latest/userguide/eks-provisioned-control-plane.html">Amazon EKS Provisioned Control Plane user guide</a>.&nbsp;<br> </p>

Explore Amazon Elastic Kubernetes Service (Amazon EKS), AWS's managed Kubernetes platform for deploying, managing, and scaling containerized applications. This article covers EKS architecture, control planes, worker nodes, networking, security, storage, autoscaling, integration with AWS services, and a practical deployment example. Learn how Amazon EKS helps developers and DevOps engineers build scalable, reliable, and production-ready cloud-native applications.

What's Changed • fix(al2027): only build with public AMIs to fix SSM agent installation issues by @Youssef-Beltagy in https://github.com/awslabs/amazon-eks-ami/pull/2883 • feat(al2023): add packer scripts to support Nitro Sandboxes by @shvbsle in https://github.com/awslabs/amazon-eks-ami/pull/2884 Full Changelog: https://github.com/awslabs/amazon-eks-ami/compare/v20261107...v20261112

Learn how to deploy one large language model across two GPU nodes on Amazon EKS using the multi-node Ray LLM Deep Learning Containers, with separate prefill and decode nodes behind one OpenAI-compatible endpoint. The pre-built container ships the full inference stack, so you configure the deployment instead of assembling it.

AWS Nitro Sandboxes bring hardware-enforced, per-pod isolation to Amazon EKS. Every sandboxed pod runs in its own lightweight virtual machine with the isolation of a dedicated Amazon EC2 instance and ...

Discover more about what's new at AWS with Amazon EKS Auto Mode now supports security groups for Pods

Learn what Amazon EKS is, how it works, its key benefits, and how to deploy your first app in 3 simple steps. This is a beginner-friendly guide from Skill Builder’s Cloud Skills Series.

AWS Batch now supports Linux capabilities, seccomp profiles, and pod-level security context settings for Amazon EKS job definitions.

Amazon CloudWatch now offers accelerated compute insights for monitoring and optimizing AI inference workloads running on GPUs in Amazon EKS clusters.

A reference architecture for securely sharing one Amazon SageMaker HyperPod EKS cluster across multiple teams, using AWS IAM Identity Center for authentication, per-team SageMaker Domains and Kubernetes namespaces for isolation, HyperPod Task Governance for fairness, and namespace-level cost allocation for chargeback.

What's Changed • fix: reuse existing local storage RAID array after volume replacement by @lawraa in https://github.com/awslabs/amazon-eks-ami/pull/2869 • chore(nvidia): retry fabric manager service on failures by @kummatty in https://github.com/awslabs/amazon-eks-ami/pull/2871 • feat(nvidia): record nvidia package contents by @lawraa in https://github.com/awslabs/amazon-eks-ami/pull/2865 • feat(nvidia): exposing nvidia container runtime config in nodeadm config by @kummatty in https://github.com/awslabs/amazon-eks-ami/pull/2875 • chore: using unsigned fallbacks for s3 requests by @kummatty in https://github.com/awslabs/amazon-eks-ami/pull/2877 Full Changelog: https://github.com/awslabs/amazon-eks-ami/compare/v20261026...v20261107

AWS Backup now supports resource modifiers for Amazon EKS restores 0 views Skip to first unread message Eyal Estrin unread, 11:24 PM (16 minutes ago)    to https://aws.amazon.com/about-aws/whats-new/2026/11/aws-backup-resource-modifiers-eks/ https://aws.amazon.com/blogs/storage/remap-amazon-eks-namespaces-on-restore-with-aws-backup-resource-modifiers/ https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-eks.html Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

<p>Today, AWS Backup announces support for resource modifiers when restoring Amazon Elastic Kubernetes Service (Amazon EKS) backups. Resource modifiers let you transform Kubernetes resources during a restore, so you can adapt a restored cluster to its target environment.</p> <p>When you restore an EKS backup that has been copied across accounts or across AWS Regions, the restored cluster can carry references tied to the source environment, such as IAM roles, database endpoints, and Amazon ECR registry URIs. Previously, you had to locate and update these references manually after every restore, which was time consuming and error prone. With resource modifiers, you can define transformation rules once via a YAML file, and AWS Backup applies them automatically as part of the restore, improving the reliability of your cross-account and cross-Region disaster recovery workflows.</p> <p>AWS Backup support for resource modifiers for Amazon EKS backups is available in all commercial AWS Regions and AWS GovCloud (US) Regions. To get started, see the <a href="https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-eks.html" target="_blank" rel="noopener noreferrer">AWS Backup Documentation</a> and read the <a href="https://aws.amazon.com/blogs/storage/remap-amazon-eks-namespaces-on-restore-with-aws-backup-resource-modifiers/" target="_blank" rel="noopener noreferrer">launch blog</a>.</p>

AWS Batch now supports additional Kubernetes security context settings in Amazon EKS job definitions, including Linux capabilities, seccomp profiles, and pod-level settings. For EKS clusters that enforce the Kubernetes Pod Security Standards restricted profile, you can now run AWS Batch jobs with only the privileges and system calls they require. To get started, use the RegisterJobDefinition API to set capabilities and seccompProfile in a container's securityContext, or set securityContext in podProperties to define pod-wide settings such as fsGroup. Container-level settings override pod-level defaults. You can configure these settings through the AWS Management Console, AWS CLI, AWS SDKs, or AWS CloudFormation. The additional security context settings for AWS Batch on Amazon EKS are now supported in all https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/ where AWS Batch is available. For more information, see the Amazon EKS properties section in the https://docs.aws.amazon.com/batch/latest/userguide/job_definition_parameters.html#job-definition-parameters-eks-properties.

AWS Backup now supports resource modifiers for Amazon EKS restores, enabling automatic transformation of Kubernetes resources during cross-account and cross-Region disaster recovery.

Groups Conversations All groups and messages Sign in     Amazon EKS Provisioned Control Plane now offers a 24 GB etcd database on 4XL and 8XL tiers 0 views Eyal Estrin unread, 12:18 PM (14 minutes ago)    to https://aws.amazon.com/about-aws/whats-new/2026/11/amazon-eks-provisioned-control-plane-larger-etcd-database/ https://docs.aws.amazon.com/eks/latest/userguide/eks-provisioned-control-plane.html Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

Discover more about what's new at AWS with Introducing AWS Nitro Sandboxes on Amazon EKS, ECS and EC2 for hardware isolated pods, tasks and VMs

AWS Backup now supports resource modifiers to remap Amazon EKS namespaces during restore operations, enabling namespace renaming and object relocation without modifying the original recovery point.

Groups Conversations All groups and messages Sign in Cloud Development and Architecture Conversations About Privacy • Terms     Amazon EKS Auto Mode now supports security groups for Pods 0 views Skip to first unread message Eyal Estrin unread, 10:18 AM (14 minutes ago)    to https://aws.amazon.com/about-aws/whats-new/2026/11/amazon-eks-auto-mode-security-groups-for-pods/ https://docs.aws.amazon.com/eks/latest/userguide/auto-sgp.html Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward