EKS Security Architecture Example for Financial Services

EKS Security Architecture Example for Financial Services An architecture diagram generated by Archify. Internet · External users · Architecture component Internet External users AWS WAF · Web request filtering · Financial Services VPC AWS WAF Web request filtering Application Load Balancer · TLS termination · Financial Services VPC Application Load Balancer TLS termination Security monitoring · GuardDuty · Security Hub · Config · CloudTrail · Financial Services VPC Security monitoring GuardDuty · Security Hub · Config · CloudTrail EKS Cluster · Control plane / nodes · Financial Services VPC › Private Subnets EKS Cluster Control plane / nodes Application Pods · Business workloads · Financial Services VPC › Private Subnets Application Pods Business workloads Security Sidecars · In-pod security agents · Financial Services VPC › Private Subnets Security Sidecars In-pod security agents Data Services · Amazon RDS · S3 · DynamoDB (encrypted) · Financial Services VPC Data Services Amazon RDS · S3 · DynamoDB (encrypted) AWS KMS · Encryption keys for data at rest · Financial Services VPC AWS KMS Encryption keys for data at rest HTTPS Monitoring Data access Encryption key management Financial Services VPC Private Subnets Legend Backend Database Cloud Security External