From a5410bb5e736109f9dc278471e4b4b3f56c1e317 Mon Sep 17 00:00:00 2001 From: jaykayv-aws <117380659+jaykayv-aws@users.noreply.github.com> Date: Fri, 17 Nov 2023 17:33:43 +0000 Subject: [PATCH 1/2] Update hosts.md to include example for EKS Optimised AMI for RHEL Have added changes to cross reference an example which can be leveraged for building EKS custom AMIs --- content/security/docs/hosts.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/security/docs/hosts.md b/content/security/docs/hosts.md index ef354fd36..432eb5b2a 100644 --- a/content/security/docs/hosts.md +++ b/content/security/docs/hosts.md @@ -10,6 +10,8 @@ Alternately, use the [EKS optimized AMI][eks-ami] for your Kubernetes worker nod [eks-ami]: https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-amis.html +Please refer Amazon [EKS AMI RHEL Build Specification](https://github.com/aws-samples/amazon-eks-ami-rhel) for building a custom Amazon EKS AMI running on Red Hat Enterprise Linux using Hashicorp Packer. This script can be further leveraged to build STIG compliant EKS custom AMIs. + ### Keep your worker node OS updated Regardless of whether you use a container-optimized host OS like Bottlerocket or a larger, but still minimalist, Amazon Machine Image like the EKS optimized AMIs, it is best practice to keep these host OS images up to date with the latest security patches. From 9f788fdc86000c3dbab84564e7fd571ea976dda2 Mon Sep 17 00:00:00 2001 From: jaykayv-aws <117380659+jaykayv-aws@users.noreply.github.com> Date: Fri, 17 Nov 2023 17:48:52 +0000 Subject: [PATCH 2/2] Update hosts.md to include an example for EKS AMI for RHEL node Have updated this section to provide a cross reference to an example which explain how to build EKS AMI for RHEL node. --- content/security/docs/hosts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/security/docs/hosts.md b/content/security/docs/hosts.md index 432eb5b2a..ce1797d76 100644 --- a/content/security/docs/hosts.md +++ b/content/security/docs/hosts.md @@ -10,7 +10,7 @@ Alternately, use the [EKS optimized AMI][eks-ami] for your Kubernetes worker nod [eks-ami]: https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-amis.html -Please refer Amazon [EKS AMI RHEL Build Specification](https://github.com/aws-samples/amazon-eks-ami-rhel) for building a custom Amazon EKS AMI running on Red Hat Enterprise Linux using Hashicorp Packer. This script can be further leveraged to build STIG compliant EKS custom AMIs. +Please refer [Amazon EKS AMI RHEL Build Specification](https://github.com/aws-samples/amazon-eks-ami-rhel) for a sample configuration script which can be used for building a custom Amazon EKS AMI running on Red Hat Enterprise Linux using Hashicorp Packer. This script can be further leveraged to build STIG compliant EKS custom AMIs. ### Keep your worker node OS updated