Kurt Kufeld, VP of the AWShe presented Amazon detective in front of Elastic Kubernetes Services (EKS) on stage during today’s keynote. Amazon EKS is how Amazon manages Kubernetes workloads on AWS, Amazon Detective investigates things like login attempts, API calls, and network traffic from Amazon GuardDuty, AWS CloudTrail, and Amazon Virtual Private Cloud (Amazon VPC).
As companies increasingly rely on container management programs, it is: a level of automation is required that takes it off people’s hands and makes it even more difficult and crucial to have a way of understanding security events. This new feature helps security track data in the system to find root causes. When you activate the feature, Amazon Detective starts importing EKS data from the logs.
The company wrote these words in a blog post to announce the feature:
When you enable this new feature, Amazon Detective automatically starts recording EKS audit logs to capture historical API activity of users, applications, and audit plane in Amazon EKS for clusters, pods, container images, and Kubernetes topics (Users Kubernetes and service accounts ).
Amazon Detective EKS support is available today in all regions that support Amazon Detective.
Source: Lega Nerd
