Amazon EKS and AWS Service Integration

Amazon EKS and AWS Service Integration An architecture diagram generated by Archify. AWS IAM · IRSA · Pod Identity · RBAC · Architecture component AWS IAM IRSA · Pod Identity · RBAC Amazon VPC · VPC CNI · ELB · Lattice · Architecture component Amazon VPC VPC CNI · ELB · Lattice EBS · EFS · FSx · S3 · Attached via CSI drivers · Architecture component EBS · EFS · FSx · S3 Attached via CSI drivers Amazon EKS · Managed control plane · Architecture component Amazon EKS Managed control plane Amazon CloudWatch · Logs · Metrics · Insights · Architecture component Amazon CloudWatch Logs · Metrics · Insights Amazon ECR · Container image registry · Architecture component Amazon ECR Container image registry SageMaker · Bedrock · Training · inference · Architecture component SageMaker · Bedrock Training · inference Auth Pod networking Persistent volumes Metrics · logs Image pulls AI/ML workloads Legend Backend Database Cloud Security

Security and networking

  • • IRSA or EKS Pod Identity maps an IAM role straight onto a pod
  • • EKS access entries connect IAM principals to Kubernetes RBAC
  • • The VPC CNI gives pods VPC IPs and the AWS Load Balancer Controller creates ALBs and NLBs

Storage and images

  • • Install and manage the EBS, EFS, and FSx CSI drivers as EKS add-ons
  • • Pulling from ECR needs permission on the node role or through IRSA
  • • Reach S3 through the Mountpoint CSI driver or the SDK

Observability and AI/ML

  • • Ship control plane logs to CloudWatch Logs and read metrics in Container Insights
  • • Add distributed tracing with X-Ray or an ADOT collector
  • • Integrate SageMaker and Bedrock to run training and inference workloads on EKS