Amazon EKS Dashboard now provides fleet-wide visibility into certificate authority (CA) rotation

Amazon EKS Dashboard Updates

Amazon EKS now offers certificate authority (CA) rotation visibility in the Amazon EKS Dashboard, providing consolidated visibility across your clusters. This feature allows you to monitor CA rotation status and upcoming events without checking each cluster individually.

Each Amazon EKS cluster has its own CA, with clusters created since 2018 having CAs with a 10-year validity period. The EKS Dashboard now shows clusters with CAs nearing expiration and upcoming automated rotation events, enabling platform teams to prioritize actions across their fleet from a single location.

The Amazon EKS Dashboard aggregates data across accounts and Regions through AWS Organizations. To use this capability, enable trusted access for the dashboard in your organization’s management account. The dashboard is available at no additional cost and can be viewed from the US East region (us-east-1). CA rotation support is available in all commercial AWS Regions.

What to do

• Enable trusted access for the Amazon EKS Dashboard in your organization’s management account.
• Monitor CA rotation status and upcoming events from the consolidated view in the EKS Dashboard.
• Prioritize actions for clusters with CAs nearing expiration.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.