EKS - Permissions

[random-robbie]

I would love for this to check to the EKS permissions for managed k8s

Describe the solution you'd like during the checks or a new check to see if there are any k8s associated with the keys. if so this would allow full control and it should be possible to generate the kubectl config and allow full cluster control

AVAILABLE COMMANDS
       o create-cluster

       o delete-cluster

       o describe-cluster

       o help

       o list-clusters

       o update-kubeconfig

Describe alternatives you've considered manually checking eks

[SpenGietz]

Would there be anything else beyond just identifying those permissions? It would be easy to alert when those permissions are located, but maybe another module would check for them and then try to list clusters, then generate a kubectl config?

[random-robbie]

That would be ideal listing permissions for eks and listing all clusters and generating the kube-config so you could the decide which one to take control over. It would also help flush out all the secrets from the eks clusters.

[DaveYesland]

There was a eks__enum module added at some point. Assuming this covers this use case? https://github.com/RhinoSecurityLabs/pacu/blob/master/pacu/modules/eks__enum/main.py