Managed Kubernetes with EKS

Comments

• The EKS control plane is managed by AWS. Pods run on worker nodes in private subnets; the diagram shows them as a single block.
• The AWS Load Balancer Controller creates an ALB from a Kubernetes Ingress resource.
• IAM Roles for Service Accounts (IRSA) gives each pod AWS permissions without static keys.
• ECR stores the cluster's images. Enable image scanning to detect vulnerabilities before deployment.

Information flow

1. Amazon Route 53

   The user resolves the domain with Route 53.

2. Application Load Balancer

   Route 53 directs traffic to the ALB created by the Ingress controller.

3. Amazon EKS

   The ALB sends requests to the Kubernetes pods.

4. Amazon RDS or Aurora

   The pods query the database.

5. Amazon ECR

   On deployment, the nodes pull the images from ECR.