A company is using an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The company must ensure that Kubernetes service accounts in the EKS cluster have secure and granular access to specific…

Question

Options

• ACreate an IAM policy that defines the required permissions. Attach the policy directly to the IAM
• BImplement network policies within the EKS cluster to prevent Kubernetes service accounts from
• CModify the EKS cluster's IAM role to include permissions for each Kubernetes service account.
• DDefine an IAM role that includes the necessary permissions. Annotate the Kubernetes service
• ESet up a trust relationship between the IAM roles for the service accounts and an OpenID

• A
  13% (2)
• B
  31% (5)
• C
  6% (1)
• D
  50% (8)

Explanation

IAM Roles for Service Accounts (IRSA): IRSA allows you to associate an IAM role with a Kubernetes service account. This enables pods to assume the IAM role and access AWS resources securely. Annotating Service Accounts: By annotating Kubernetes service accounts with the ARN of the IAM role, you establish the association required for IRSA. OIDC Identity Provider: EKS clusters use OpenID Connect (OIDC) to authenticate service accounts. Setting up a trust relationship between the IAM role and the OIDC provider allows the Kubernetes service account to assume the IAM role.

No community discussion yet for this question.