Our Blog

Amazon EKS now supports certificate authority (CA) rotation with automated lifecycle management

Published
August 20, 2026
https://aws.amazon.com/about-aws/whats-new/2026/08/amazon-eks-certificate-authority-ca-rotation-automated-lifecycle-management

Amazon EKS Certificate Authority Rotation

Amazon EKS now offers certificate authority (CA) rotation, allowing customers to manage their cluster's CA lifecycle with automated safeguards. This feature ensures encrypted connections to the Kubernetes API remain secure and operational.

Key Points

  • Managed Lifecycle: Amazon EKS handles the rotation lifecycle and updates AWS-managed components.
  • Customer Responsibility: Customers must update worker nodes and external clients to trust the new CA.
  • Automated Safeguards: Features include advance notifications, automatic successor CA appending, and automatic activation.
  • Rollback Capability: Customers can revert to the previous CA if issues arise during the transition.

Availability

CA rotation is available at no additional cost in all commercial AWS Regions.

What to do

  • Use AWS CLI, EKS APIs, CloudFormation, or the AWS console to start CA rotation.
  • Update worker nodes and external clients to trust the new CA.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Related posts

Check out other insights from the team at West Loop Strategy.

View all
https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-redshift-data-api-longpolling-listsession-flexiblebatchexecute/

Amazon Redshift Data API announces long polling, session management, and flexible batch execution

Amazon Redshift Data API introduces new capabilities that reduce the number of API calls to retrieve SQL statement metadata or results, provide visibility into sessions, and allow batch statements to execute on separate transactions
Read more
https://aws.amazon.com/about-aws/whats-new/2026/08/amazon-rds-supports-latest-cu-gdr-microsoft-sql-server/

Amazon RDS now supports the latest CU and GDR updates for Microsoft SQL Server

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports the latest Cumulative Updates (CU) and General Distribution Release (GDR) updates for Microsoft SQL Server
Read more
https://aws.amazon.com/about-aws/whats-new/2026/06/aws-network-firewall-updates-default-drop-action

AWS Network Firewall updates default drop action for improved connection reliability

AWS Network Firewall now uses "Application drop established (server-directed only)" as the default stateful action for all newly created firewall policies, replacing the previous default of "Application drop established (bidirectional)" (formerly named "Application layer drop established")
Read more
View all