Container Supply Chain Security
Strengthening supply chain security through container image signing, SBOM, and CI/CD security gates
Strengthening supply chain security through container image signing, SBOM, and CI/CD security gates
Authentication/Authorization best practices for Non-Standard Callers (CI/CD, monitoring, automation) accessing the EKS API Server
Comprehensive guide for Amazon EKS production operations covering networking, Control Plane, security, cost optimization, and more
Root cause analysis, recovery procedures, and prevention strategies for Control Plane access loss caused by deleting the default namespace in an EKS cluster.
Compliance guide mapping SOC2, ISO27001, Electronic Financial Supervisory Regulation (전자금융감독규정), and ISMS-P to AI operations
Covers a 5-zone pre-registration rule table to submit to firewall and network teams when adopting EKS Hybrid Nodes, handling environments without FQDN wildcard support, Transit Gateway topology, and on-premises LB path design.
EKS threat detection and response using Amazon GuardDuty Extended Threat Detection
Zero-trust access control based on EKS Pod Identity and IRSA migration guide
Kubernetes policy management and governance based on Kyverno v1.17
IAM credential provider selection guide for EKS Hybrid Nodes — SSM hybrid activation vs IAM Roles Anywhere comparison, the Vault PKI integration pattern, Hybrid Nodes IAM role minimum permissions, and credential lifecycle management.
Configure private API access, ECR and S3 interface endpoints, on-premises DNS, and return routing for EKS Hybrid Nodes.
A design for validating identity, permissions, MFA, login restrictions, and session controls across Hybrid Cloud Console, AWS, and OpenShift
Covers EKS Hybrid Nodes node authentication methods (SSM hybrid activation vs IAM Roles Anywhere) and credential lifecycle management.
EKS security governance best practices covering API Server authentication/authorization, Identity-First security, policy management, supply chain security, threat detection, and compliance
Security policy enforcement and operations tool performance benchmark