EKS and ECS Security Quiz

What you'll be asked

1. Which AWS feature should be used to assign specific IAM permissions to an Amazon EKS pod rather than assigning them to the underlying EC2 worker nodes?
2. When deploying an Amazon ECS service, which 'Launch Type' offers the most isolation between containers by providing a dedicated kernel for each task?
3. You want to ensure that your EKS cluster nodes are not accessible from the public internet. Which configuration is the most secure practice?
4. Which mechanism is recommended to securely inject sensitive information, such as database passwords, into an ECS container at runtime without hardcoding them in the task definition?
5. In an EKS environment, you have a requirement to audit all API calls made to the Kubernetes control plane. Which feature must be enabled to achieve this?

Answers and explanations come after you submit.