EKS cluster with a public endpoint should limit which addresses can reach it

What it checks

EKS cluster with a public endpoint should limit which addresses can reach it

Where it applies

Terraform: aws_eks_cluster

CloudFormation: AWS::EKS::Cluster

How to fix it

1. Set public_access_cidrs to your corporate IP ranges — an omitted list defaults to 0.0.0.0/0 — or set endpoint_public_access = false and use private endpoint access.

Frameworks

• AWS FSBP EKS.1
• SOC 2 CC6.6
• PCI-DSS v4.0.1/1.4.4

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules