**Help improve this page** 

To contribute to this user guide, choose the **Edit this page on GitHub** link that is located in the right pane of every page.

# Document history
AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Updated `shield:CreateProtection` and `shield:DeleteProtection` permission in `AmazonEKSLoadBalancingPolicy`. This allows Amazon EKS Auto Mode Controller to add shield protection.Warm pool support for managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/warm-pools-managed-node-groups.html](https://docs.aws.amazon.com/eks/latest/userguide/warm-pools-managed-node-groups.html)

Amazon EKS managed node groups now support Amazon EC2 Auto Scaling warm pools. Warm pools maintain a pool of pre-initialized EC2 instances that are ready to quickly join your cluster when scaling out, decreasing latency for applications with long boot times.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `elasticloadbalancing:ModifyIpPools` and updated `elasticloadbalancing:RegisterTargets` permission in `AmazonEKSLoadBalancingPolicy`. This allows Amazon EKS Auto Mode Controller to support setting IPAM pool for ALB and support multi-cluster and custom targetgroupbindings respectivelyAWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `ec2:ModifyNetworkInterfaceAttribute` permission in `AmazonEKSNetworkingPolicy`. This allows Amazon EKS Auto Mode Controller to modify network interface attributes related to EC2 instancesAWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `autoscaling:PutWarmPool`, `autoscaling:DeleteWarmPool`, and `autoscaling:DescribeWarmPool` permissions to `AWSServiceRoleForAmazonEKSNodegroup` policy. This allows Amazon EKS Managed Nodegroups to manage underlying ASG warm pool resources throughout the node group lifecycle.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Removed the "eks" prefix requirement in the name of the target instance profile for the `iam:GetInstanceProfile` permission in `AmazonEKSServiceRolePolicy`. This allows Amazon EKS Auto Mode to validate and utilize custom instance profiles in NodeClasses without requiring the "eks" naming prefix.Kubernetes version `1.35`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-35](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-35)

Added Kubernetes version `1.35` support for new clusters and version upgrades.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `ec2:LockSnapshot` permission to `AmazonEBSCSIDriverPolicy` to allow the EBS CSI Driver to lock EBS Snapshots directly.Amazon EKS Capabilities[https://docs.aws.amazon.com/eks/latest/userguide/capabilities.html](https://docs.aws.amazon.com/eks/latest/userguide/capabilities.html)

Amazon EKS now provides fully managed cluster capabilities with EKS Capabilities, with support for declarative continuous deployment with support for Argo CD, AWS resource management with support for AWS Controllers for Kubernetes, and Kubernetes resource composition and orchestration with support for Kube Resource Orchestrator.New AWS managed policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS has released a new managed policy `AmazonEKSMCPReadOnlyAccess` to enable read-only tools in the Amazon EKS MCP Server for observability and troubleshooting. For information, see [Amazon EKS updates to AWS managed policies](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).Network observability[https://docs.aws.amazon.com/eks/latest/userguide/network-observability.html](https://docs.aws.amazon.com/eks/latest/userguide/network-observability.html)

Amazon EKS now provides enhanced container network observability with performance monitoring and workload traffic visibility.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `ec2:CopyVolumes` permission to `AmazonEBSCSIDriverPolicy` to allow the EBS CSI Driver to copy EBS volumes directly.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `ec2:DescribeRouteTables` and `ec2:DescribeNetworkAcls` permissions to `AmazonEKSServiceRolePolicy`. This allows Amazon EKS to detect configuration issues with VPC route tables and network ACLs for hybrid nodes as part of cluster insights.Service linked role update[https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks-connector.html](https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks-connector.html)

Added `ssmmessages:OpenDataChannel` permission to `AmazonEKSConnectorServiceRolePolicy` Kubernetes version `1.34`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-34](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-34)

Added Kubernetes version `1.34` support for new clusters and version upgrades.Configurable node auto repair[https://docs.aws.amazon.com/eks/latest/userguide/node-health.html](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html)

Amazon EKS now provides more granular control over the node auto repair behavior.Refresh cluster insights[https://docs.aws.amazon.com/eks/latest/userguide/view-cluster-insights.html](https://docs.aws.amazon.com/eks/latest/userguide/view-cluster-insights.html)

You can now manually refresh cluster insights.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permission to `AmazonEKSServiceRolePolicy`. This role can attach new access policy `AmazonEKSEventPolicy`. Restricted permissions for `ec2:DeleteLaunchTemplate` and `ec2:TerminateInstances`.Cross-service confused deputy prevention[https://docs.aws.amazon.com/eks/latest/userguide/cross-service-confused-deputy-prevention.html](https://docs.aws.amazon.com/eks/latest/userguide/cross-service-confused-deputy-prevention.html)

Added a topic with an example trust policy that you can apply for Cross-service confused deputy prevention. Amazon EKS accepts the `aws:SourceArn` and `aws:SourceAccount` conditions in the trust policy of an EKS cluster role.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.33.2`, `1.32.6`, `1.31.10`, and `1.30.14`.VPC CNI Multi-NIC feature for multi-homed pods[https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html)

Amazon EKS adds multi-homed pods to the VPC CNI. Now you can configure a workload and the VPC CNI assigned IP addresses from every NIC on the EC2 instance to each pod. The application can make concurrent connections to use the bandwidth from each NIC. Every network interface is configured in the same subnet and security groups as the node.

Previously, you needed to use Multus CNI to run multiple other CNIs to create multi-homed pods. Documentation and steps to do this have been moved to [https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html).VPC CNI troubleshooting content update[https://docs.aws.amazon.com/eks/latest/userguide/network-policies-troubleshooting.html](https://docs.aws.amazon.com/eks/latest/userguide/network-policies-troubleshooting.html)

Expanded the troubleshooting page for Kubernetes *network policy* in the VPC CNI. Added the CRDs and RBAC permissions, and 12 known issues.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `ssmmessages:OpenDataChannel` permission to `AmazonEKSLocalOutpostServiceRolePolicy`.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSServiceRolePolicy` and `AmazonEKSComputePolicy` to allow Amazon EKS Auto Mode to launch instances by using the EC2 On-Demand Capacity Reservations in your account. Also, added the permissions to `AmazonEKSComputePolicy` for Amazon EKS to create the EC2 Spot service-linked role on your behalf.Managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `AmazonEKSDashboardConsoleReadOnly` policy.Amazon EKS Auto Mode update to `NodeClass`[https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec](https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec)

The `NodeClass` template for Auto Mode nodes added configuration for separate pod subnets. This adds the optional keys `podSubnetSelectorTerms` and `podSecurityGroupSelectorTerms` to set the subnets and security groups for the pods.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions.Target secondary and cross-account roles with EKS Pod Identities[https://docs.aws.amazon.com/eks/latest/userguide/pod-id-assign-target-role.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-assign-target-role.html)

Amazon EKS adds *target IAM roles* to EKS Pod Identities for automated role chaining. You can use this to automatically assume a role in another account and EKS Pod Identity rotates the temporary credentials. Each Pod Identity association must have an IAM role in the same account to assume first, then it uses that role to assume the target role.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Taipei) (`ap-east-2`) AWS Region.`IPv6` access control for dual-stack public endpoints for new `IPv6` clusters[https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html)

Amazon EKS adds `IPv6` CIDR blocks to control access to the public cluster endpoint for new `IPv6` clusters. Previously, you could only add `IPv4` CIDR blocks to allow traffic to the public cluster endpoint, even for dual-stack cluster endpoints.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.32.5`, `1.31.9`, and `1.30.13`.Kubernetes version `1.33`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions-standard.html#kubernetes-1-33](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions-standard.html#kubernetes-1-33)

Added Kubernetes version `1.33` support for new clusters and version upgrades.New cluster insights for EKS Hybrid Nodes[https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html)

Amazon EKS adds new cluster insights that check the configuration of your hybrid nodes. These insight checks will warn you about issues with on-premises nodes and pods and the remote network configuration of the cluster.Add-on support for Amazon FSx CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html)

You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon FSx CSI driver.Edit Prometheus scrapers in the console[https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html#viewing-prometheus-scraper-details](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html#viewing-prometheus-scraper-details)

You can now edit Amazon Managed Service for Prometheus scrapers in the Amazon EKS console.Managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `AmazonEKSDashboardServiceRolePolicy` policy.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions.New pages for Amazon FSx for Lustre performance[https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html)

Added new topics with details on optimizing Amazon FSx for Lustre performance.Amazon EKS Auto Mode update to `NodeClass`[https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec](https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec)

The `NodeClass` template for Auto Mode nodes added configuration for forward network proxies. This adds the optional key `advancedNetworking` to set your HTTPS proxy.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions.Bottlerocket for hybrid nodes[https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-bottlerocket.html](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-bottlerocket.html)

Bottlerocket is now available for EKS Hybrid Nodes.New concepts pages for hybrid networking[https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-concepts.html](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-concepts.html)

Added pages for concepts of EKS Hybrid Nodes. These cover the on-premises and cloud networking in detail with diagrams.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Added permissions to `AmazonEKSServiceRolePolicy` to allow EKS AI/ML customers to add Egress rules to the default EKS Cluster security group.

## Kubernetes version 1.31 is now available for local clusters on AWS Outposts
[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html)

You can now create an Amazon EKS local cluster on an AWS Outposts using Kubernetes version 1.31.Node health for EKS Hybrid Nodes[https://docs.aws.amazon.com/eks/latest/userguide/node-health.html](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html)

You can use `eks-node-monitoring-agent` on hybrid nodes, starting from version `1.2.0-eksbuild.1`. Run `eks-node-monitoring-agent` as an Amazon EKS add-on to detect and show health issues.EKS Hybrid Nodes for existing clusters[https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-cluster-update.html](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-cluster-update.html)

You can now add, change, or remove the hybrid nodes configuration of existing clusters. Previously, you could only add the hybrid nodes configuration to new clusters when you created them. With Amazon EKS Hybrid Nodes, you can use your on-premises and edge infrastructure as nodes in Amazon EKS clusters. AWS manages the AWS-hosted Kubernetes control plane of the Amazon EKS cluster, and you manage the hybrid nodes that run in your on-premises or edge environments.Rollback: Prevent accidental upgrades with cluster insights[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#update-cluster-control-plane](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#update-cluster-control-plane)

Amazon EKS has temporarily rolled back a feature that would require you to use a `--force` flag to upgrade your cluster when there were certain cluster insight issues. For more information, see [Temporary rollback of enforcing upgrade insights on update cluster version](https://github.com/aws/containers-roadmap/issues/2570) on GitHub.Bottlerocket FIPS AMIs[https://docs.aws.amazon.com/eks/latest/userguide/bottlerocket-fips-amis.html](https://docs.aws.amazon.com/eks/latest/userguide/bottlerocket-fips-amis.html)

Bottlerocket FIPS AMIs are now available in standard managed node groups.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode. Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode.Update strategies for managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/managed-node-update-behavior.html#managed-node-update-upgrade](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-update-behavior.html#managed-node-update-upgrade)

You can now use update strategies to configure the version update process for managed node groups. This introduces the *minimal* update strategy to terminate nodes before making new ones, which is useful in capacity constrained environments. The *default* update strategy continues the existing behavior.Kubernetes version `1.32`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-32](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-32)

Added Kubernetes version `1.32` support for new clusters and version upgrades.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Thailand) Region (`ap-southeast-7`) and Mexico (Central) (`mx-central-1`) AWS Regions. EKS Auto Mode and VPC Endpoints for the EKS API aren’t available in either Region.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added multiple permissions to `AmazonEBSCSIDriverPolicy` to allow the Amazon EBS CSI Driver restore all snapshots, enable Fast Snapshot Restore (FSR) on EBS volumes, and modify tags on volumes.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSLoadBalancingPolicy`.Updated cluster insights[https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html)

Amazon EKS upgrade insights will now warn about more cluster health and version compatibility issues. It can detect issues between different Kubernetes and Amazon EKS components such as `kubelet`, `kube-proxy`, and Amazon EKS add-ons.Node monitoring agent and auto repair[https://docs.aws.amazon.com/eks/latest/userguide/node-health.html](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html)

You can use the new `eks-node-monitoring-agent` as an Amazon EKS add-on to detect and show health issues. You can also enable node auto repair to automatically replace nodes when issues are detected.Amazon EKS Hybrid Nodes[https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-overview.html](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-overview.html)

You can now run node on-premises connected to Amazon EKS clusters. With Amazon EKS Hybrid Nodes, you can use your on-premises and edge infrastructure as nodes in Amazon EKS clusters. AWS manages the AWS-hosted Kubernetes control plane of the Amazon EKS cluster, and you manage the hybrid nodes that run in your on-premises or edge environments.Amazon EKS Auto Mode[https://docs.aws.amazon.com/eks/latest/userguide/automode.html](https://docs.aws.amazon.com/eks/latest/userguide/automode.html)

Amazon EKS Auto Mode fully automates Kubernetes cluster infrastructure management for compute, storage, and networking on AWS. It simplifies Kubernetes management by automatically provisioning infrastructure, selecting optimal compute instances, dynamically scaling resources, continuously optimizing costs, patching operating systems, and integrating with AWS security services.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Updated `AWSServiceRoleForAmazonEKSNodegroup` for compatibility with China regions.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.31.2`, `1.30.6`, `1.29.10`, and `1.28.15`.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS updated AWS managed policy `AmazonEKSLocalOutpostClusterPolicy`. Added `ec2:DescribeAvailabilityZones` permission so the AWS Cloud Controller Manager on the cluster control plane can identify the Availability Zone that each node is in.Kubernetes version 1.30 is now available for local clusters on AWS Outposts[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html)

You can now create an Amazon EKS local cluster on an AWS Outposts using Kubernetes version 1.30.Bottlerocket AMIs that use FIPS 140-3[https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id-bottlerocket.html](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id-bottlerocket.html)

Bottlerocket AMIs are available that are preconfigured to use FIPS 140-3 validated cryptographic modules. This includes the Amazon Linux 2023 Kernel Crypto API Cryptographic Module and the AWS-LC Cryptographic Module.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Updated `AWSServiceRoleForAmazonEKSNodegroup` policy to allow `ec2:RebootInstances` for instances created by Amazon EKS managed node groups. Restricted the `ec2:CreateTags` permissions for Amazon EC2 resources.Observability dashboard[https://docs.aws.amazon.com/eks/latest/userguide/observability-dashboard.html](https://docs.aws.amazon.com/eks/latest/userguide/observability-dashboard.html)

The observability dashboard helps you to quickly detect, troubleshoot, and remediate issues. There are also new [CloudWatch vended metrics](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html) available in the `AWS/EKS` namespace.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS updated AWS managed policy `AmazonEKSServiceRolePolicy`. Added permissions for EKS access policies, load balancer management, and automated cluster resource cleanup.New role creation in console for add-ons that support EKS Pod Identities[https://docs.aws.amazon.com/eks/latest/userguide/creating-an-add-on.html#_create_add_on_console](https://docs.aws.amazon.com/eks/latest/userguide/creating-an-add-on.html#_create_add_on_console)

There are new steps when using the console to create or update add-ons that support EKS Pod Identities where you can automatically generate IAM roles with the appropriate name, role policy, and trust policy for the add-on.Managed node groups in AWS Local Zones[https://docs.aws.amazon.com/eks/latest/userguide/local-zones.html](https://docs.aws.amazon.com/eks/latest/userguide/local-zones.html)

Managed node groups can now be created in AWS Local Zones.New metrics are available[https://docs.aws.amazon.com/eks/latest/userguide/view-raw-metrics.html](https://docs.aws.amazon.com/eks/latest/userguide/view-raw-metrics.html)

There are new metrics available under the API group `metrics.eks.amazonaws.com`.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS updated AWS managed policy `AmazonEKSComputePolicy`. Updated resource permissions for the `iam:AddRoleToInstanceProfile` action.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS added a new AWS managed policy: `AmazonEKSComputePolicy` AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSClusterPolicy`. Added `ec2:DescribeInstanceTopology` permission to allow Amazon EKS to attach topology information to the node as labels.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS added a new AWS managed policy: `AmazonEKSBlockStoragePolicy` AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS added a new AWS managed policy: `AmazonEKSLoadBalancingPolicy` AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `cloudwatch:PutMetricData` permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to publish metrics to Amazon CloudWatch.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

EKS added a new AWS managed policy: `AmazonEKSNetworkingPolicy` AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added `autoscaling:ResumeProcesses`, `autoscaling:SuspendProcesses`, and associated permissions to `AWSServiceRoleForAmazonEKSNodegroup` in China regions to integrate with Amazon Application Recovery Controller for EKS. No changes to other regions.Dual-stack endpoints for new `IPv6` clusters[Configure endpoint access](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html)

Connect to new `IPv6` clusters with a `eks-cluster.region.api.aws` endpoint that is dual-stack. This endpoint is returned when you describe these clusters. `kubectl` and other Kubernetes API clients in `IPv4`, `IPv6`, or dual-stack environments can resolve and connect to these endpoints for public or private clusters.AWS managed policy updates[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

Added permissions to `AmazonEKSServicePolicy` and `AmazonEKSServiceRolePolicy`. Added `ec2:GetSecurityGroupsForVpc` and associated tag permissions to allow EKS to read security group information and update related tags.AL2023 accelerated AMIs[https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html)

You can now use accelerated `NVIDIA` and AWS Neuron instances for AMIs based on AL2023.New source format

We have switched over to a new source format with some layout changes. There are temporary minor formatting issues that we are addressing.AWS managed policy updates - New policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

EKS added a new AWS managed policy.Kubernetes version `1.31`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-31](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-31)

Added Kubernetes version `1.31` support for new clusters and version upgrades.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Kubernetes version 1.29 is now available for local clusters on AWS Outposts[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html)

You can now create an Amazon EKS local cluster on an AWS Outposts using Kubernetes version 1.29.EKS Pod Identity in AWS GovCloud (US)[https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html)

Amazon EKS Pod Identities associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs. Unlike IAM roles for service accounts, EKS Pod Identities are completely inside EKS; you don’t need an OIDC identity provider.Scenario-driven content updates

We renamed and updated topics to be more scenario-driven throughout the entire guide.Dual-stack VPC interface endpoints for Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html](https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html)

You can now create dual-stack VPC interface endpoints for Amazon EKS with both `IPv4` and `IPv6` IP addresses and DNS names.New dual-stack endpoints for the Amazon EKS APIs with `IPv6` addresses[https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html)

The EKS API for creating and managing clusters, and the OIDC issuer URLs for clusters have new dual-stack endpoints. The new DNS name for the Amazon EKS API is `eks.region.api.aws` which resolves to `IPv4` addresses and `IPv6` addresses. New clusters have a new dual-stack OIDC issuer URL (`oidc-eks.region.api.aws`).Capacity Blocks for managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks-mng.html](https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks-mng.html)

You can now use Capacity Blocks for managed node groups.Auto Scaling Group metrics collection enabled by default[https://docs.aws.amazon.com/eks/latest/userguide/enable-asg-metrics.html](https://docs.aws.amazon.com/eks/latest/userguide/enable-asg-metrics.html)

Amazon EKS managed node groups now have Amazon EC2 Auto Scaling group metrics enabled by default with no additional charge. Previously, you had to do several steps to enable this feature.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Improvements to AMI information references[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-amis.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-amis.html)

We made improvements to the AMI information references, in particular for Bottlerocket.Kubernetes version `1.26`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Kubernetes version `1.26` is now in extended support.Kubernetes version `1.30`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-30](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-30)

Added Kubernetes version `1.30` support for new clusters and version upgrades.CoreDNS Autoscaling[https://docs.aws.amazon.com/eks/latest/userguide/coredns-autoscaling.html](https://docs.aws.amazon.com/eks/latest/userguide/coredns-autoscaling.html)

CoreDNS autoscaler will dynamically adapt the number of replicas of the CoreDNS deployment in an EKS cluster based on the number of nodes and CPU cores. This feature works for CoreDNS `v1.9` and the latest platform version of EKS release version `1.25` and later.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.29.4`, `1.28.9`, and `1.27.13`.CloudWatch Container Insights support for Windows[https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html)

The Amazon CloudWatch Observability Operator add-on now also allows Container Insights on Windows worker nodes in the cluster.Kubernetes concepts[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-concepts.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-concepts.html)

Added new Kubernetes concepts topic.Restructure Access and IAM Content[https://docs.aws.amazon.com/eks/latest/userguide/cluster-auth.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-auth.html)

Move existing pages related to access and IAM topics, such as auth config map, access entries, Pod ID, and IRSA into new section. Revise overview content.Bottlerocket OS support for Amazon S3 CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html)

The Mountpoint for Amazon S3 CSI driver is now compatible with Bottlerocket.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Amazon Linux 2023[https://docs.aws.amazon.com/eks/latest/userguide/al2023.html](https://docs.aws.amazon.com/eks/latest/userguide/al2023.html)

Amazon Linux 2023 (AL2023) is a new Linux-based operating system designed to provide a secure, stable, and high-performance environment for your cloud applications.EKS Pod Identity and IRSA support sidecars in Kubernetes `1.29`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29)

In Kubernetes `1.29`, sidecar containers are available in Amazon EKS clusters. Sidecar containers are supported with IAM roles for service accounts or EKS Pod Identity. For more information about sidecars, see [Sidecar Containers](https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/) in the Kubernetes documentation.Kubernetes version `1.29`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29)

Added Kubernetes version `1.29` support for new clusters and version upgrades.Full release: Amazon EKS Extended Support for Kubernetes versions[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Extended Kubernetes version support allows you to stay at a specific Kubernetes version for longer than 14 months.Amazon EKS cluster health detection in the AWS Cloud[https://docs.aws.amazon.com/eks/latest/userguide/troubleshooting.html#cluster-health-status](https://docs.aws.amazon.com/eks/latest/userguide/troubleshooting.html#cluster-health-status)

Amazon EKS detects issues with your Amazon EKS clusters and the infrastructure of the cluster prerequisites in *cluster health*. You can view the issues with your EKS clusters in the AWS Management Console and in the `health` of the cluster in the EKS API. These issues are in addition to the issues that are detected by and displayed by the console. Previously, cluster health was only available for local clusters on AWS Outposts.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Canada West (Calgary) (`ca-west-1`) AWS Region.Cluster insights[https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html)

You can now get recommendations on your cluster based on recurring checks.You can now grant IAM roles and users access to your cluster using access entries[https://docs.aws.amazon.com/eks/latest/userguide/access-entries.html](https://docs.aws.amazon.com/eks/latest/userguide/access-entries.html)

Before the introduction of access entries, you granted IAM roles and users access to your cluster by adding entries to the `aws-auth` `ConfigMap`. Now each cluster has an access mode, and you can switch to using access entries on your schedule. After you switch modes, you can add users by adding access entries in the AWS CLI, AWS CloudFormation, and the AWS SDKs.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.28.4`, `1.27.8`, `1.26.11`, and `1.25.16`.Mountpoint for Amazon S3 CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html)

You can now install the Mountpoint for Amazon S3 CSI driver on Amazon EKS clusters.Amazon EKS Pod Identities[https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html)

Amazon EKS Pod Identities associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs. Unlike IAM roles for service accounts, EKS Pod Identities are completely inside EKS; you don’t need an OIDC identity provider.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Turn on Prometheus metrics when creating a cluster[https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html)

In the AWS Management Console, you can now turn on Prometheus metrics when creating a cluster. You can also view Prometheus scraper details in the **Observability** tab.CSI snapshot controller[https://docs.aws.amazon.com/eks/latest/userguide/csi-snapshot-controller.html](https://docs.aws.amazon.com/eks/latest/userguide/csi-snapshot-controller.html)

You can now install the CSI snapshot controller for use with compatible CSI drivers, such as the Amazon EBS CSI driver.ADOT Operator topic rewrite[https://docs.aws.amazon.com/eks/latest/userguide/opentelemetry.html](https://docs.aws.amazon.com/eks/latest/userguide/opentelemetry.html)

The Amazon EKS add-on support for ADOT Operator section was redundant with the AWS Distro for OpenTelemetry documentation. We migrated remaining essential information to that resource to reduce outdated and inconsistent information.CoreDNS EKS add-on support for Prometheus metrics[https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html)

The `v1.10.1-eksbuild.5`, `v1.9.3-eksbuild.9`, and `v1.8.7-eksbuild.8` versions of the EKS add-on for CoreDNS expose the port that CoreDNS published metrics to, in the `kube-dns` service. This makes it easier to include the CoreDNS metrics in your monitoring systems.Amazon EKS CloudWatch Observability Operator add-on[https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html)

Added Amazon EKS CloudWatch Observability Operator page.Capacity Blocks for self-managed P5 instances in US East (Ohio)[https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks.html](https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks.html)

In US East (Ohio), you can now use Capacity Blocks for self-managed P5 instances.Clusters support modifying subnets and security groups[https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html)

You can update the cluster to change which subnets and security groups the cluster uses. You can update from the AWS Management Console, the latest version of the AWS CLI, AWS CloudFormation, and `eksctl` version `v0.164.0-rc.0` or later. You might need to do this to provide subnets with more available IP addresses to successfully upgrade a cluster version.Cluster role and managed node group role supports customer managed AWS Identity and Access Management policies[https://docs.aws.amazon.com/eks/latest/userguide/cluster-iam-role.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-iam-role.html)

You can use a custom IAM policy on the cluster role, instead of the [AmazonEKSClusterPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEKSClusterPolicy.html) AWS managed policy. Also, you can use a custom IAM policy on the node role in a managed node group, instead of the [AmazonEKSWorkerNodePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEKSWorkerNodePolicy.html) AWS managed policy. Do this to create a policy with the least privilege to meet strict compliance requirements.Fix link to eksctl installation

Fix install link for eksctl after the page was moved.Preview release: Amazon EKS Extended Support for Kubernetes versions[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Extended Kubernetes version support allows you to stay at a specific Kubernetes version for longer than 14 months.Remove references to AWS App Mesh integration

Amazon EKS integrations with AWS App Mesh remain for existing customers of App Mesh only.Kubernetes version `1.28`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-28](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-28)

Added Kubernetes version `1.28` support for new clusters and version upgrades.CoreDNS Amazon EKS add-on supports modifying PDB[https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html)

You can modify the `PodDisruptionBudget` of the EKS add-on for CoreDNS in versions `v1.9.3-eksbuild.7` and later and `v1.10.1-eksbuild.4` and later.Existing clusters support Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes[https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)

You can use Kubernetes *network policy* in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes *network policy* in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.Amazon EKS support for shared subnets[https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html#network-requirements-shared](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html#network-requirements-shared)

New [Shared subnet requirements and considerations](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html#network-requirements-shared) for making Amazon EKS clusters in shared subnets.Updates to What is Amazon EKS?[https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html)

Added new [Common use cases](https://docs.aws.amazon.com/eks/latest/userguide/common-use-cases.html) and [Architecture](https://docs.aws.amazon.com/eks/latest/userguide/eks-architecture.html) topics. Refreshed other topics.Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes[https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)

You can use Kubernetes *network policy* with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes *network policy* with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Israel (Tel Aviv) (`il-central-1`) AWS Region.Configurable ephemeral storage for Fargate[https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-configuration.html#fargate-storage](https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-configuration.html#fargate-storage)

You can increase the total amount of ephemeral storage for each Pod running on Amazon EKS Fargate.Add-on support for Amazon EFS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html#add-ons-aws-efs-csi-driver](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html#add-ons-aws-efs-csi-driver)

You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon EFS CSI driver.AWS managed policy updates - New policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS added a new AWS managed policy.Kubernetes version updates for 1.27, 1.26, 1.25, and 1.24 are now available for local clusters on AWS Outposts[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html)

Kubernetes version updates to 1.27.3, 1.26.6, 1.25.11, and 1.24.15 are now available for local clusters on AWS OutpostsIP prefixes support for Windows nodes[https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html)

Assigning IP prefixes to your nodes can enable you to host a significantly higher number of Pods on your nodes than you can when assigning individual secondary IP addresses to your nodes.Amazon FSx for OpenZFS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/fsx-openzfs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/fsx-openzfs-csi.html)

You can now install the Amazon FSx for OpenZFS CSI driver on Amazon EKS clusters.Pods on Linux nodes in `IPv4` clusters can now communicate with `IPv6` endpoints.[https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6-egress.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6-egress.html)

After assigning an IPv6 address to your node, your Pods' `IPv4` address is network address translated to the `IPv6` address of the node that it’s running on.Windows managed node groups in AWS GovCloud (US) Regions[https://docs.aws.amazon.com/eks/latest/userguide/create-managed-node-group.html](https://docs.aws.amazon.com/eks/latest/userguide/create-managed-node-group.html)

In the AWS GovCloud (US) Regions, Amazon EKS managed node groups can now run Windows containers.Kubernetes version `1.27`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-27](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-27)

Added Kubernetes version `1.27` support for new clusters and version upgrades.Kubernetes version `1.26`[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Added Kubernetes version `1.26` support for new clusters and version upgrades.Domainless gMSA[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html#ad-and-gmsa-support](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html#ad-and-gmsa-support)

You can now use domainless gMSA with Windows Pods.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Melbourne) (`ap-southeast-4`) AWS Region.Amazon File Cache CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/file-cache-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/file-cache-csi.html)

You can now install the Amazon File Cache CSI driver on Amazon EKS clusters.Kubernetes version 1.25 is now available for local clusters on AWS Outposts[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html)

You can now create an Amazon EKS local cluster on an Outpost using Kubernetes versions `1.22` – `1.25`.Kubernetes version `1.25`

Added Kubernetes version `1.25` support for new clusters and version upgrades.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Hyderabad) (`ap-south-2`), Europe (Zurich) (`eu-central-2`), and Europe (Spain) (`eu-south-2`) AWS Regions.Kubernetes versions `1.21` – `1.24` are now available for local clusters on AWS Outposts.[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html)

You can now create an Amazon EKS local cluster on an Outpost using Kubernetes versions `1.21` – `1.24`. Previously, only version `1.21` was available.Amazon EKS now supports AWS PrivateLink[https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html](https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html)

You can use an AWS PrivateLink to create a private connection between your VPC and Amazon EKS.Managed node group Windows support[https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html)

You can now use Windows for Amazon EKS managed node groups.Amazon EKS add-ons from independent software vendors are now available in the AWS Marketplace[https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html)

You can now browse and subscribe to Amazon EKS add-ons from independent software vendors through the AWS Marketplace.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Kubernetes version `1.24`

Added Kubernetes version `1.24` support for new clusters and version upgrades.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Middle East (UAE) (`me-central-1`) AWS Region.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Local clusters on AWS Outposts are now available[https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html)

You can now create an Amazon EKS local cluster on an Outpost.Fargate vCPU based quotas[https://docs.aws.amazon.com/eks/latest/userguide/service-quotas.html#service-quotas-eks-fargate](https://docs.aws.amazon.com/eks/latest/userguide/service-quotas.html#service-quotas-eks-fargate)

Fargate is transitioning from Pod based quotas to vCPU based quotas.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.AWS managed policy updates - New policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS added a new AWS managed policy.Cost monitoring[https://docs.aws.amazon.com/eks/latest/userguide/cost-monitoring](https://docs.aws.amazon.com/eks/latest/userguide/cost-monitoring)

Amazon EKS now supports Kubecost, which enables you to monitor costs broken down by Kubernetes resources including Pods, nodes, namespaces, and labels.AWS managed policy updates - New policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS added a new AWS managed policy.Tag resources for billing[https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html#tag-resources-for-billing](https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html#tag-resources-for-billing)

Added `aws:eks:cluster-name` generated cost allocation tag support for all clusters.Fargate profile wildcards[https://docs.aws.amazon.com/eks/latest/userguide/fargate-profile.html#fargate-profile-wildcards](https://docs.aws.amazon.com/eks/latest/userguide/fargate-profile.html#fargate-profile-wildcards)

Added support for Fargate profile wildcards in the selector criteria for namespaces, label keys, and label values.Kubernetes version `1.23`

Added Kubernetes version `1.23` support for new clusters and version upgrades.View Kubernetes resources in the AWS Management Console[https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html](https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html)

You can now view information about the Kubernetes resources deployed to your cluster using the AWS Management Console.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Jakarta) (`ap-southeast-3`) AWS Region.Observability page and ADOT add-on support[https://docs.aws.amazon.com/eks/latest/userguide/eks-observe.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-observe.html)

Added Observability page and AWS Distro for OpenTelemetry (ADOT).AWS managed policy updates - New policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS added a new AWS managed policy.Kubernetes version `1.22`

Added Kubernetes version `1.22` support for new clusters and version upgrades.Added Fargate Pod patching details[https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-patching.html](https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-patching.html)

When upgrading Fargate Pods, Amazon EKS first tries to evict Pods based on your Pod disruption budgets. You can create event rules to react to failed evictions before the Pods are deleted.Full release: Add-on support for Amazon EBS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html)

You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon EBS CSI driver.AWS Outposts content update[https://docs.aws.amazon.com/eks/latest/userguide/outposts.html](https://docs.aws.amazon.com/eks/latest/userguide/outposts.html)

Instructions to deploy an Amazon EKS cluster on AWS Outposts.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Windows `containerd` support[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html.html)

You can now select the `containerd` runtime for Windows nodes.Added Amazon EKS Connector considerations to security documentation[https://docs.aws.amazon.com/eks/latest/userguide/connector-considerations.html](https://docs.aws.amazon.com/eks/latest/userguide/connector-considerations.html)

Describes the shared responsibility model as it relates to connected clusters.Assign `IPv6` addresses to your Pods and services[https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6.html)

You can now create a `1.21` or later cluster that assigns `IPv6` addresses to your Pods and services.AWS managed policy updates - Update to an existing policy[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)

Amazon EKS updated an existing AWS managed policy.Preview release: Add-on support for Amazon EBS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html)

You can now preview using the AWS Management Console, AWS CLI, and API to manage the Amazon EBS CSI driver.Karpenter autoscaler support[https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html#karpenter](https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html#karpenter)

You can now use the Karpenter open-source project to autoscale your nodes.Fluent Bit Kubernetes filter support in Fargate logging[https://docs.aws.amazon.com/eks/latest/userguide/fargate-logging.html#fargate-logging-kubernetes-filter](https://docs.aws.amazon.com/eks/latest/userguide/fargate-logging.html#fargate-logging-kubernetes-filter)

You can now use the Fluent Bit Kubernetes filter with Fargate logging.Windows support available in the control plane[https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html](https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html)

Windows support is now available in your control plane. You no longer need to enable it in your data plane.Bottlerocket added as an AMI type for managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami-bottlerocket.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami-bottlerocket.html)

Previously, Bottlerocket was only available as a self-managed node option. Now it can be configured as a managed node group, reducing the effort that’s required to meet node compliance requirements.DL1 driver support[https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html)

Custom Amazon Linux AMIs now support deep learning workloads for Amazon Linux 2. This enablement allows a generic on-premises or cloud baseline configuration.VT1 video support[https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html)

Custom Amazon Linux AMIs now support VT1 for some distributions. This enablement advertises Xilinx U30 devices on your Amazon EKS cluster.Amazon EKS Anywhere is now available[https://docs.aws.amazon.com/eks/latest/userguide/eks-deployment-options.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-deployment-options.html)

Amazon EKS Anywhere is a new deployment option for Amazon EKS that you can use to create and operate Kubernetes clusters on-premises.Amazon EKS Connector is now available[https://docs.aws.amazon.com/eks/latest/userguide/eks-connector.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-connector.html)

You can use Amazon EKS Connector to register and connect any conformant Kubernetes cluster to AWS and visualize it in the Amazon EKS console.Amazon FSx for NetApp ONTAP CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/fsx-ontap.html](https://docs.aws.amazon.com/eks/latest/userguide/fsx-ontap.html)

Added topic that summarizes the Amazon FSx for NetApp ONTAP CSI driver and gives links to other references.Managed node groups now auto-calculates the Amazon EKS recommended maximum Pods for nodes[https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html)

Managed node groups now auto-calculate the Amazon EKS maximum Pods for nodes that you deploy without a launch template, or with a launch template that you haven’t specified an AMI ID in.Remove Amazon EKS management of add-on settings without removing the Amazon EKS add-on software[https://docs.aws.amazon.com/eks/latest/userguide/managing-vpc-cni.html#removing-vpc-cni-eks-add-on](https://docs.aws.amazon.com/eks/latest/userguide/managing-vpc-cni.html#removing-vpc-cni-eks-add-on)

You can now remove an Amazon EKS add-on without removing the add-on software from your cluster.Create multi-homed Pods using Multus[https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html)

You can now add multiple network interfaces to a Pod using Multus.Add more IP addresses to your Linux Amazon EC2 nodes[https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html)

You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node. You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node.Kubernetes version `1.21`

Added Kubernetes version `1.21` support.`containerd` runtime bootstrap[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

The Amazon EKS optimized accelerated Amazon Linux Amazon Machine Image (AMI) now contains a bootstrap flag that you can use to enable the `containerd` runtime in Amazon EKS optimized and Bottlerocket AMIs. This flag is available in all supported Kubernetes versions of the AMI.Added managed policies topic[https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)

A list of all Amazon EKS IAM managed policies and changes that were made to them since June 17, 2021.Use security groups for Pods with Fargate[https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html)

You can now use security groups for Pods with Fargate, in addition to using them with Amazon EC2 nodes.Added CoreDNS and `kube-proxy` Amazon EKS add-ons[https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html)

Amazon EKS can now help you manage the CoreDNS and `kube-proxy` Amazon EKS add-ons for your cluster.Kubernetes version `1.20`

Added Kubernetes version `1.20` support for new clusters and version upgrades.AWS Load Balancer Controller `2.2.0` released[https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html](https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html)

You can now use the AWS Load Balancer Controller to create Elastic Load Balancers using instance or IP targets.Node taints for managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/node-taints-managed-node-groups.html](https://docs.aws.amazon.com/eks/latest/userguide/node-taints-managed-node-groups.html)

Amazon EKS now supports adding node taints to managed node groups.Secrets encryption for existing clusters[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#enable-kms](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#enable-kms)

Amazon EKS now supports adding [secrets encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/) to existing clusters.Kubernetes version `1.19`

Added Kubernetes version `1.19` support for new clusters and version upgrades.Amazon EKS now supports OpenID Connect (OIDC) identity providers as a method to authenticate users to a version `1.16` or later cluster.[https://docs.aws.amazon.com/eks/latest/userguide/authenticate-oidc-identity-provider.html](https://docs.aws.amazon.com/eks/latest/userguide/authenticate-oidc-identity-provider.html)

OIDC identity providers can be used with, or as an alternative to AWS Identity and Access Management (IAM).Amazon EKS can now manage specific add-ons for your cluster[https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html)

You can manage add-ons yourself, or allow Amazon EKS to control the launch and version of an add-on through the Amazon EKS API.Deploy Spot Instance types in a managed node group[https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html#managed-node-group-capacity-types](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html#managed-node-group-capacity-types)

You can now deploy multiple Spot or On-Demand Instance types to a managed node group.View node and workload resources in the AWS Management Console[https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html](https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html)

You can now view details about your managed, self-managed, and Fargate nodes and your deployed Kubernetes workloads in the AWS Management Console.NLB IP target support[https://docs.aws.amazon.com/eks/latest/userguide/networkg-load-balancing.html#network-load-balancer](https://docs.aws.amazon.com/eks/latest/userguide/networkg-load-balancing.html#network-load-balancer)

You can now deploy a Network Load Balancer with IP targets. This means that you can use an NLB to load balance network traffic to Fargate Pods and directly to Pods that are running on Amazon EC2 nodes.Share an ALB across multiple Ingresses[https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html](https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html)

You can now share an AWS Application Load Balancer (ALB) across multiple Kubernetes Ingresses. In the past, you had to deploy a separate ALB for each Ingress.Kubernetes version `1.18`

Added Kubernetes version `1.18` support for new clusters and version upgrades.Specify a custom CIDR block for Kubernetes service IP address assignment.[https://docs.aws.amazon.com/eks/latest/userguide/create-cluster.html](https://docs.aws.amazon.com/eks/latest/userguide/create-cluster.html)

You can now specify a custom CIDR block that Kubernetes assigns service IP addresses from.Assign security groups to individual Pods[https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html)

You can now associate different security groups to some of the individual Pods that are running on many Amazon EC2 instance types.Deploy Bottlerocket on your nodes[https://docs.aws.amazon.com/eks/latest/userguide/launch-node-bottlerocket.html](https://docs.aws.amazon.com/eks/latest/userguide/launch-node-bottlerocket.html)

You can now deploy nodes that are running [Bottlerocket](https://aws.amazon.com/bottlerocket/).Managed node group launch templates and custom AMI[https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html)

You can now deploy a managed node group that uses an Amazon EC2 launch template. The launch template can specify a custom AMI, if you choose.The ability to launch Arm nodes is generally available[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html#arm-ami](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html#arm-ami)

You can now launch Arm nodes in managed and self-managed node groups.EFS support for AWS Fargate[https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html)

You can now use Amazon EFS with AWS Fargate.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

This is a new platform version with security fixes and enhancements. This includes UDP support for services of type `LoadBalancer` when using Network Load Balancers with Kubernetes version `1.15` or later. For more information, see the [Allow UDP for AWS Network Load Balancer](https://github.com/kubernetes/kubernetes/pull/92109) issue on GitHub.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Africa (Cape Town) (`af-south-1`) and Europe (Milan) (`eu-south-1`) AWS Regions.Fargate usage metrics[https://docs.aws.amazon.com/eks/latest/userguide/monitoring-fargate-usage.html](https://docs.aws.amazon.com/eks/latest/userguide/monitoring-fargate-usage.html)

 AWS Fargate provides CloudWatch usage metrics that provide visibility into your account’s usage of Fargate On-Demand resources.Kubernetes version `1.17`

Added Kubernetes version `1.17` support for new clusters and version upgrades.Create and manage App Mesh resources from within Kubernetes with the App Mesh controller for Kubernetes[https://docs.aws.amazon.com/eks/latest/userguide/mesh-k8s-integration.html](https://docs.aws.amazon.com/eks/latest/userguide/mesh-k8s-integration.html)

You can create and manage App Mesh resources from within Kubernetes. The controller also automatically injects the Envoy proxy and init containers into Pods that you deploy.Amazon EKS now supports Amazon EC2 Inf1 nodes[https://docs.aws.amazon.com/eks/latest/userguide/inferentia-support.html](https://docs.aws.amazon.com/eks/latest/userguide/inferentia-support.html)

You can add Amazon EC2 Inf1 nodes to your cluster.Amazon EKS AWS Region expansion

Amazon EKS is now available in the AWS GovCloud (US-East) (`us-gov-east-1`) and AWS GovCloud (US-West) (`us-gov-west-1`) AWS Regions.Kubernetes `1.12` is no longer supported on Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html)

Kubernetes version `1.12` is no longer supported on Amazon EKS. Update any `1.12` clusters to version `1.13` or later to avoid service interruption.Kubernetes version `1.16`

Added Kubernetes version `1.16` support for new clusters and version upgrades.Added the **AWSServiceRoleForAmazonEKS** service-linked role[https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks.html](https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks.html)

Added the **AWSServiceRoleForAmazonEKS** service-linked role.Kubernetes version `1.15`

Added Kubernetes version `1.15` support for new clusters and version upgrades.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Beijing (`cn-north-1`) and Ningxia (`cn-northwest-1`) AWS Regions.FSx for Lustre CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html)

Added topic for installing the FSx for Lustre CSI driver on Kubernetes `1.14` Amazon EKS clusters.Restrict network access to the public access endpoint of a cluster[https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html)

With this update, you can use Amazon EKS to restrict the CIDR ranges that can communicate to the public access endpoint of the Kubernetes API server.Resolve the private access endpoint address for a cluster from outside of a VPC[https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html)

With this update, you can use Amazon EKS to resolve the private access endpoint of the Kubernetes API server from outside of a VPC.(Beta) Amazon EC2 A1 Amazon EC2 instance nodes[https://docs.aws.amazon.com/eks/latest/userguide/arm-support.html](https://docs.aws.amazon.com/eks/latest/userguide/arm-support.html)

Launch [Amazon EC2 A1](https://aws.amazon.com/ec2/instance-types/a1/) Amazon EC2 instance nodes that register with your Amazon EKS cluster.Creating a cluster on AWS Outposts[https://docs.aws.amazon.com/eks/latest/userguide/eks-on-outposts.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-on-outposts.html)

Amazon EKS now supports creating clusters on AWS Outposts.AWS Fargate on Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/fargate.html](https://docs.aws.amazon.com/eks/latest/userguide/fargate.html)

Amazon EKS Kubernetes clusters now support running Pods on Fargate.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Canada (Central) (`ca-central-1`) AWS Region.Managed node groups[https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html)

Amazon EKS managed node groups automate the provisioning and lifecycle management of nodes (Amazon EC2 instances) for Amazon EKS Kubernetes clusters.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform versions to address [CVE-2019-11253](https://groups.google.com/forum/#!msg/kubernetes-security-announce/jk8polzSUxs/dfq6a-MnCQAJ).Kubernetes `1.11` is no longer supported on Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html)

Kubernetes version `1.11` is no longer supported on Amazon EKS. Please update any `1.11` clusters to version `1.12` or higher to avoid service interruption.Amazon EKS AWS Region expansion

Amazon EKS is now available in the South America (São Paulo) (`sa-east-1`) AWS Region.Windows support[https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html](https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html)

Amazon EKS clusters running Kubernetes version `1.14` now support Windows workloads.Autoscaling[https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html](https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html)

Added a chapter to cover some of the different types of Kubernetes autoscaling that are supported on Amazon EKS clusters.Kubernetes Dashboard update[https://docs.aws.amazon.com/eks/latest/userguide/dashboard-tutorial.html](https://docs.aws.amazon.com/eks/latest/userguide/dashboard-tutorial.html)

Updated topic for installing the Kubernetes Dashboard on Amazon EKS clusters to use the beta `2.0` version.Amazon EFS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html)

Added topic for installing the Amazon EFS CSI driver on Kubernetes `1.14` Amazon EKS clusters.Amazon EC2 Systems Manager parameter for Amazon EKS optimized AMI ID[https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html)

Added topic for retrieving the Amazon EKS optimized AMI ID using an Amazon EC2 Systems Manager parameter. The parameter eliminates the need for you to look up AMI IDs.Amazon EKS resource tagging[https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html)

You can manage the tagging of your Amazon EKS clusters.Amazon EBS CSI driver[https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html)

Added topic for installing the Amazon EBS CSI driver on Kubernetes `1.14` Amazon EKS clusters.New Amazon EKS optimized AMI patched for `CVE-2019-9512` and `CVE-2019-9514`[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to address [CVE-2019-9512 and CVE-2019-9514](https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA).Announcing deprecation of Kubernetes `1.11` in Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Amazon EKS discontinued support for Kubernetes version `1.11` on November 4, 2019.IAM roles for service accounts[https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html)

With IAM roles for service accounts on Amazon EKS clusters, you can associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs.Kubernetes version `1.14`

Added Kubernetes version `1.14` support for new clusters and version upgrades.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Middle East (Bahrain) (`me-south-1`) AWS Region.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform versions to address [CVE-2019-9512 and CVE-2019-9514](https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA).Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform versions to address [CVE-2019-11247 and CVE-2019-11249](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM).Amazon EKS Region expansion

Amazon EKS is now available in the Asia Pacific (Hong Kong) (`ap-east-1`) AWS Region.Kubernetes `1.10` no longer supported on Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html)

Kubernetes version `1.10` is no longer supported on Amazon EKS. Update any `1.10` clusters to version `1.11` or higher to avoid service interruption.Added topic on ALB ingress controller[https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html](https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html)

The AWS ALB Ingress Controller for Kubernetes is a controller that causes an ALB to be created when ingress resources are created.New Amazon EKS optimized AMI[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Removing unnecessary `kubectl` binary from AMIs.Kubernetes version `1.13`

Added Kubernetes version `1.13` support for new clusters and version upgrades.New Amazon EKS optimized AMI patched for `AWS-2019-005`[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to address the vulnerabilities that are described in link:security/security-bulletins/AWS-2019-005/[AWS-2019-005,type="marketing"].Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform version for Kubernetes `1.11` and `1.10` clusters to support custom DNS names in the `kubelet` certificate and improve `etcd` performance.Announcing discontinuation of support of Kubernetes `1.10` in Amazon EKS[https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html)

Amazon EKS stopped supporting Kubernetes version `1.10` on July 22, 2019.Getting started with `eksctl`[https://docs.aws.amazon.com/eks/latest/userguide/getting-started-eksctl.html](https://docs.aws.amazon.com/eks/latest/userguide/getting-started-eksctl.html)

This getting started guide describes how you can install all of the required resources to get started with Amazon EKS using `eksctl`. This is a simple command line utility for creating and managing Kubernetes clusters on Amazon EKS.AWS CLI `get-token` command

The `aws eks get-token` command was added to the AWS CLI. You no longer need to install the AWS IAM Authenticator for Kubernetes to create client security tokens for cluster API server communication. Upgrade your AWS CLI installation to the latest version to use this new functionality. For more information, see [Installing the AWS Command Line Interface](https://docs.aws.amazon.com/cli/latest/userguide/installing.html) in the * AWS Command Line Interface User Guide*.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform version for Kubernetes `1.12` clusters to support custom DNS names in the `kubelet` certificate and improve `etcd` performance. This fixes a bug that caused node `kubelet` daemons to request a new certificate every few seconds.Prometheus tutorial[https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html)

Added topic for deploying Prometheus to your Amazon EKS cluster.Amazon EKS control plane logging[https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html](https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html)

With this update, you can get audit and diagnostic logs directly from the Amazon EKS control pane. You can use these CloudWatch logs in your account as reference for securing and running clusters.Kubernetes version `1.12`

Added Kubernetes version `1.12` support for new clusters and version upgrades.Added App Mesh getting started guide[https://docs.aws.amazon.com/eks/latest/userguide/mesh-gs-k8s.html](https://docs.aws.amazon.com/eks/latest/userguide/mesh-gs-k8s.html)

Added documentation for getting started with App Mesh and Kubernetes.Amazon EKS API server endpoint private access[https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html)

Added documentation for disabling public access for your Amazon EKS cluster’s Kubernetes API server endpoint.Added topic for installing the Kubernetes Metrics Server[https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html](https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html)

The Kubernetes Metrics Server is an aggregator of resource usage data in your cluster.Added list of related open source projects[https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html](https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html)

These open source projects extend the functionality of Kubernetes clusters running on AWS, including clusters that are managed by Amazon EKS.Added topic for installing Helm locally[https://docs.aws.amazon.com/eks/latest/userguide/helm.html](https://docs.aws.amazon.com/eks/latest/userguide/helm.html)

The `helm` package manager for Kubernetes helps you install and manage applications on your Kubernetes cluster. This topic shows how to install and run the `helm` and `tiller` binaries locally. That way, you can install and manage charts using the Helm CLI on your local system.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform version that updates Amazon EKS Kubernetes `1.11` clusters to patch level `1.11.8` to address [CVE-2019-1002100](https://discuss.kubernetes.io/t/kubernetes-security-announcement-v1-11-8-1-12-6-1-13-4-released-to-address-medium-severity-cve-2019-1002100/5147).Amazon EKS AWS Region expansion

Amazon EKS is now available in the Europe (London) (`eu-west-2`), Europe (Paris) (`eu-west-3`), and Asia Pacific (Mumbai) (`ap-south-1`) AWS Regions.Increased cluster limit[https://docs.aws.amazon.com/eks/latest/userguide/service_limits.html](https://docs.aws.amazon.com/eks/latest/userguide/service_limits.html)

Amazon EKS has increased the number of clusters that you can create in an AWS Region from 3 to 50.New Amazon EKS optimized AMI patched for `ALAS-2019-1156`[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to address the vulnerability that’s described in [ALAS-2019-1156](https://alas.aws.amazon.com/ALAS-2019-1156.html).New Amazon EKS optimized AMI patched for `ALAS2-2019-1141`[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to address the CVEs that are referenced in [ALAS2-2019-1141](https://alas.aws.amazon.com/AL2/ALAS-2019-1141.html).Amazon EKS AWS Region expansion

Amazon EKS is now available in the Asia Pacific (Seoul) (`ap-northeast-2`) AWS Region.Amazon EKS region expansion

Amazon EKS is now available in the following additional AWS Regions: Europe (Frankfurt) (`eu-central-1`), Asia Pacific (Tokyo) (`ap-northeast-1`), Asia Pacific (Singapore) (`ap-southeast-1`), and Asia Pacific (Sydney) (`ap-southeast-2`).Amazon EKS cluster updates[https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html)

Added documentation for Amazon EKS [cluster Kubernetes version updates](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) and [node replacement](https://docs.aws.amazon.com/eks/latest/userguide/update-workers.html).Amazon EKS AWS Region expansion

Amazon EKS is now available in the Europe (Stockholm) (`eu-north-1`) AWS Region.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform version updating Kubernetes to patch level `1.10.11` to address link:security/security-bulletins/AWS-2018-020/[CVE-2018-1002105,type="marketing"].Added version `1.0.0` support for the ALB ingress controller

The ALB ingress controller releases version `1.0.0` with formal support from AWS.Added support for CNI network configuration[https://docs.aws.amazon.com/eks/latest/userguide/cni-custom-network.html](https://docs.aws.amazon.com/eks/latest/userguide/cni-custom-network.html)

The Amazon VPC CNI plugin for Kubernetes version `1.2.1` now supports custom network configuration for secondary Pod network interfaces.Added support for `MutatingAdmissionWebhook` and `ValidatingAdmissionWebhook`[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

Amazon EKS platform version `1.10-eks.2` now supports `MutatingAdmissionWebhook` and `ValidatingAdmissionWebhook` admission controllers.Added partner AMI information[https://docs.aws.amazon.com/eks/latest/userguide/eks-partner-amis.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-partner-amis.html)

Canonical has partnered with Amazon EKS to create node AMIs that you can use in your clusters.Added instructions for AWS CLI `update-kubeconfig` command[https://docs.aws.amazon.com/eks/latest/userguide/create-kubeconfig.html](https://docs.aws.amazon.com/eks/latest/userguide/create-kubeconfig.html)

Amazon EKS has added the `update-kubeconfig` to the AWS CLI to simplify the process of creating a `kubeconfig` file for accessing your cluster.New Amazon EKS optimized AMIs[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMIs (with and without GPU support) to provide various security fixes and AMI optimizations.Amazon EKS AWS Region expansion

Amazon EKS is now available in the Europe (Ireland) (`eu-west-1`) Region.Amazon EKS platform version update[https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html)

New platform version with support for Kubernetes [aggregation layer](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) and the [Horizontal Pod Autoscaler](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/)(HPA).New Amazon EKS optimized AMIs and GPU support[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to use a new AWS CloudFormation node template and [bootstrap script](https://github.com/awslabs/amazon-eks-ami/blob/main/templates/al2/runtime/bootstrap.sh). In addition, a new [Amazon EKS optimized AMI with GPU support](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html#gpu-ami) is available.New Amazon EKS optimized AMI patched for `ALAS2-2018-1058`[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has updated the Amazon EKS optimized AMI to address the CVEs that are referenced in [ALAS2-2018-1058](https://alas.aws.amazon.com/AL2/ALAS-2018-1058.html).Amazon EKS optimized AMI build scripts[https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html)

Amazon EKS has open-sourced the build scripts that are used to build the Amazon EKS optimized AMI. These build scripts are now available on GitHub.Amazon EKS initial release

Initial documentation for service launch

The following table describes some of the major updates and new features for the Amazon EKS User Guide. To receive notifications when this table gets a new entry, you can subscribe to the following URL with an RSS reader:

```
https://docs.aws.amazon.com/eks/latest/userguide/doc-history.rss
```

| Change | Description | Date | 
| --- |--- |--- |
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Updated `shield:CreateProtection` and `shield:DeleteProtection` permission in `AmazonEKSLoadBalancingPolicy`. This allows Amazon EKS Auto Mode Controller to add shield protection. | April 14, 2026 | 
| [Warm pool support for managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/warm-pools-managed-node-groups.html) | Amazon EKS managed node groups now support Amazon EC2 Auto Scaling warm pools. Warm pools maintain a pool of pre-initialized EC2 instances that are ready to quickly join your cluster when scaling out, decreasing latency for applications with long boot times. | April 7, 2026 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `elasticloadbalancing:ModifyIpPools` and updated `elasticloadbalancing:RegisterTargets` permission in `AmazonEKSLoadBalancingPolicy`. This allows Amazon EKS Auto Mode Controller to support setting IPAM pool for ALB and support multi-cluster and custom targetgroupbindings respectively | March 20, 2026 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `autoscaling:PutWarmPool`, `autoscaling:DeleteWarmPool`, and `autoscaling:DescribeWarmPool` permissions to `AWSServiceRoleForAmazonEKSNodegroup` policy. This allows Amazon EKS Managed Nodegroups to manage underlying ASG warm pool resources throughout the node group lifecycle. | February 17, 2026 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `ec2:ModifyNetworkInterfaceAttribute` permission in `AmazonEKSNetworkingPolicy`. This allows Amazon EKS Auto Mode Controller to modify network interface attributes related to EC2 instances | February 3, 2026 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Removed the "eks" prefix requirement in the name of the target instance profile for the `iam:GetInstanceProfile` permission in `AmazonEKSServiceRolePolicy`. This allows Amazon EKS Auto Mode to validate and utilize custom instance profiles in NodeClasses without requiring the "eks" naming prefix. | February 2, 2026 | 
| [Kubernetes version `1.35`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-35) | Added Kubernetes version `1.35` support for new clusters and version upgrades. | January 27, 2026 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `ec2:LockSnapshot` permission to `AmazonEBSCSIDriverPolicy` to allow the EBS CSI Driver to lock EBS Snapshots directly. | January 15, 2026 | 
| [Amazon EKS Capabilities](https://docs.aws.amazon.com/eks/latest/userguide/capabilities.html) | Amazon EKS now provides fully managed cluster capabilities with EKS Capabilities, with support for declarative continuous deployment with support for Argo CD, AWS resource management with support for AWS Controllers for Kubernetes, and Kubernetes resource composition and orchestration with support for Kube Resource Orchestrator. | November 30, 2025 | 
| [New AWS managed policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS has released a new managed policy `AmazonEKSMCPReadOnlyAccess` to enable read-only tools in the Amazon EKS MCP Server for observability and troubleshooting. For information, see [Amazon EKS updates to AWS managed policies](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates). | November 21, 2025 | 
| [Network observability](https://docs.aws.amazon.com/eks/latest/userguide/network-observability.html) | Amazon EKS now provides enhanced container network observability with performance monitoring and workload traffic visibility. | November 19, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `ec2:CopyVolumes` permission to `AmazonEBSCSIDriverPolicy` to allow the EBS CSI Driver to copy EBS volumes directly. | November 17, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `ec2:DescribeRouteTables` and `ec2:DescribeNetworkAcls` permissions to `AmazonEKSServiceRolePolicy`. This allows Amazon EKS to detect configuration issues with VPC route tables and network ACLs for hybrid nodes as part of cluster insights. | October 22, 2025 | 
| [Service linked role update](https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks-connector.html) | Added `ssmmessages:OpenDataChannel` permission to `AmazonEKSConnectorServiceRolePolicy`  | October 15, 2025 | 
| [Kubernetes version `1.34`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-34) | Added Kubernetes version `1.34` support for new clusters and version upgrades. | October 2, 2025 | 
| [Configurable node auto repair](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html) | Amazon EKS now provides more granular control over the node auto repair behavior. | September 22, 2025 | 
| [Refresh cluster insights](https://docs.aws.amazon.com/eks/latest/userguide/view-cluster-insights.html) | You can now manually refresh cluster insights. | August 27, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permission to `AmazonEKSServiceRolePolicy`. This role can attach new access policy `AmazonEKSEventPolicy`. Restricted permissions for `ec2:DeleteLaunchTemplate` and `ec2:TerminateInstances`. | August 26, 2025 | 
| [Cross-service confused deputy prevention](https://docs.aws.amazon.com/eks/latest/userguide/cross-service-confused-deputy-prevention.html) | Added a topic with an example trust policy that you can apply for Cross-service confused deputy prevention. Amazon EKS accepts the `aws:SourceArn` and `aws:SourceAccount` conditions in the trust policy of an EKS cluster role. | August 19, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.33.2`, `1.32.6`, `1.31.10`, and `1.30.14`. | July 30, 2025 | 
| [VPC CNI Multi-NIC feature for multi-homed pods](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html) | Amazon EKS adds multi-homed pods to the VPC CNI. Now you can configure a workload and the VPC CNI assigned IP addresses from every NIC on the EC2 instance to each pod. The application can make concurrent connections to use the bandwidth from each NIC. Every network interface is configured in the same subnet and security groups as the node.Previously, you needed to use Multus CNI to run multiple other CNIs to create multi-homed pods. Documentation and steps to do this have been moved to [https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html). | July 15, 2025 | 
| [VPC CNI troubleshooting content update](https://docs.aws.amazon.com/eks/latest/userguide/network-policies-troubleshooting.html) | Expanded the troubleshooting page for Kubernetes *network policy* in the VPC CNI. Added the CRDs and RBAC permissions, and 12 known issues. | June 30, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions. | June 26, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `ssmmessages:OpenDataChannel` permission to `AmazonEKSLocalOutpostServiceRolePolicy`. | June 26, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSServiceRolePolicy` and `AmazonEKSComputePolicy` to allow Amazon EKS Auto Mode to launch instances by using the EC2 On-Demand Capacity Reservations in your account. Also, added the permissions to `AmazonEKSComputePolicy` for Amazon EKS to create the EC2 Spot service-linked role on your behalf. | June 20, 2025 | 
| [Managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `AmazonEKSDashboardConsoleReadOnly` policy. | June 19, 2025 | 
| [Amazon EKS Auto Mode update to `NodeClass`](https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec) | The `NodeClass` template for Auto Mode nodes added configuration for separate pod subnets. This adds the optional keys `podSubnetSelectorTerms` and `podSecurityGroupSelectorTerms` to set the subnets and security groups for the pods. | June 13, 2025 | 
| [Target secondary and cross-account roles with EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-assign-target-role.html) | Amazon EKS adds *target IAM roles* to EKS Pod Identities for automated role chaining. You can use this to automatically assume a role in another account and EKS Pod Identity rotates the temporary credentials. Each Pod Identity association must have an IAM role in the same account to assume first, then it uses that role to assume the target role. | June 11, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions. | June 11, 2025 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Taipei) (`ap-east-2`) AWS Region. | June 6, 2025 | 
| [`IPv6` access control for dual-stack public endpoints for new `IPv6` clusters](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html) | Amazon EKS adds `IPv6` CIDR blocks to control access to the public cluster endpoint for new `IPv6` clusters. Previously, you could only add `IPv4` CIDR blocks to allow traffic to the public cluster endpoint, even for dual-stack cluster endpoints. | June 5, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.32.5`, `1.31.9`, and `1.30.13`. | May 30, 2025 | 
| [New cluster insights for EKS Hybrid Nodes](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html) | Amazon EKS adds new cluster insights that check the configuration of your hybrid nodes. These insight checks will warn you about issues with on-premises nodes and pods and the remote network configuration of the cluster. | May 29, 2025 | 
| [Kubernetes version `1.33`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions-standard.html#kubernetes-1-33) | Added Kubernetes version `1.33` support for new clusters and version upgrades. | May 29, 2025 | 
| [Add-on support for Amazon FSx CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html) | You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon FSx CSI driver. | May 23, 2025 | 
| [Edit Prometheus scrapers in the console](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html#viewing-prometheus-scraper-details) | You can now edit Amazon Managed Service for Prometheus scrapers in the Amazon EKS console. | May 22, 2025 | 
| [Managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `AmazonEKSDashboardServiceRolePolicy` policy. | May 21, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions. | May 16, 2025 | 
| [New pages for Amazon FSx for Lustre performance](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html) | Added new topics with details on optimizing Amazon FSx for Lustre performance. | May 2, 2025 | 
| [Amazon EKS Auto Mode update to `NodeClass`](https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec) | The `NodeClass` template for Auto Mode nodes added configuration for forward network proxies. This adds the optional key `advancedNetworking` to set your HTTPS proxy. | April 30, 2025 | 
| [Bottlerocket for hybrid nodes](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-bottlerocket.html) | Bottlerocket is now available for EKS Hybrid Nodes. | April 29, 2025 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. There aren’t any new patch versions of Kubernetes in these platform versions. | April 29, 2025 | 
| [New concepts pages for hybrid networking](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-concepts.html) | Added pages for concepts of EKS Hybrid Nodes. These cover the on-premises and cloud networking in detail with diagrams. | April 18, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly. | April 16, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Added permissions to `AmazonEKSServiceRolePolicy` to allow EKS AI/ML customers to add Egress rules to the default EKS Cluster security group. | April 14, 2025 | 
| [Node health for EKS Hybrid Nodes](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html) | You can use `eks-node-monitoring-agent` on hybrid nodes, starting from version `1.2.0-eksbuild.1`. Run `eks-node-monitoring-agent` as an Amazon EKS add-on to detect and show health issues. | March 31, 2025 | 
| [EKS Hybrid Nodes for existing clusters](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-cluster-update.html) | You can now add, change, or remove the hybrid nodes configuration of existing clusters. Previously, you could only add the hybrid nodes configuration to new clusters when you created them. With Amazon EKS Hybrid Nodes, you can use your on-premises and edge infrastructure as nodes in Amazon EKS clusters. AWS manages the AWS-hosted Kubernetes control plane of the Amazon EKS cluster, and you manage the hybrid nodes that run in your on-premises or edge environments. | March 31, 2025 | 
| [Rollback: Prevent accidental upgrades with cluster insights](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#update-cluster-control-plane) | Amazon EKS has temporarily rolled back a feature that would require you to use a `--force` flag to upgrade your cluster when there were certain cluster insight issues. For more information, see [Temporary rollback of enforcing upgrade insights on update cluster version](https://github.com/aws/containers-roadmap/issues/2570) on GitHub. | March 28, 2025 | 
| [Bottlerocket FIPS AMIs](https://docs.aws.amazon.com/eks/latest/userguide/bottlerocket-fips-amis.html) | Bottlerocket FIPS AMIs are now available in standard managed node groups. | March 27, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode. Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode. | February 28, 2025 | 
| [Update strategies for managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-update-behavior.html#managed-node-update-upgrade) | You can now use update strategies to configure the version update process for managed node groups. This introduces the *minimal* update strategy to terminate nodes before making new ones, which is useful in capacity constrained environments. The *default* update strategy continues the existing behavior. | January 27, 2025 | 
| [Kubernetes version `1.32`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-32) | Added Kubernetes version `1.32` support for new clusters and version upgrades. | January 23, 2025 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Thailand) Region (`ap-southeast-7`) and Mexico (Central) (`mx-central-1`) AWS Regions. EKS Auto Mode and VPC Endpoints for the EKS API aren’t available in either Region. | January 14, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added multiple permissions to `AmazonEBSCSIDriverPolicy` to allow the Amazon EBS CSI Driver restore all snapshots, enable Fast Snapshot Restore (FSR) on EBS volumes, and modify tags on volumes. | January 13, 2025 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSLoadBalancingPolicy`. | December 26, 2024 | 
| [Updated cluster insights](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html) | Amazon EKS upgrade insights will now warn about more cluster health and version compatibility issues. It can detect issues between different Kubernetes and Amazon EKS components such as `kubelet`, `kube-proxy`, and Amazon EKS add-ons. | December 20, 2024 | 
| [Node monitoring agent and auto repair](https://docs.aws.amazon.com/eks/latest/userguide/node-health.html) | You can use the new `eks-node-monitoring-agent` as an Amazon EKS add-on to detect and show health issues. You can also enable node auto repair to automatically replace nodes when issues are detected. | December 16, 2024 | 
| [Amazon EKS Hybrid Nodes](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-overview.html) | You can now run node on-premises connected to Amazon EKS clusters. With Amazon EKS Hybrid Nodes, you can use your on-premises and edge infrastructure as nodes in Amazon EKS clusters. AWS manages the AWS-hosted Kubernetes control plane of the Amazon EKS cluster, and you manage the hybrid nodes that run in your on-premises or edge environments. | December 1, 2024 | 
| [Amazon EKS Auto Mode](https://docs.aws.amazon.com/eks/latest/userguide/automode.html) | Amazon EKS Auto Mode fully automates Kubernetes cluster infrastructure management for compute, storage, and networking on AWS. It simplifies Kubernetes management by automatically provisioning infrastructure, selecting optimal compute instances, dynamically scaling resources, continuously optimizing costs, patching operating systems, and integrating with AWS security services. | December 1, 2024 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.31.2`, `1.30.6`, `1.29.10`, and `1.28.15`. | November 22, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Updated `AWSServiceRoleForAmazonEKSNodegroup` for compatibility with China regions. | November 22, 2024 | 
| [Kubernetes version 1.30 is now available for local clusters on AWS Outposts](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html) | You can now create an Amazon EKS local cluster on an AWS Outposts using Kubernetes version 1.30. | November 21, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS updated AWS managed policy `AmazonEKSLocalOutpostClusterPolicy`. Added `ec2:DescribeAvailabilityZones` permission so the AWS Cloud Controller Manager on the cluster control plane can identify the Availability Zone that each node is in. | November 21, 2024 | 
| [Bottlerocket AMIs that use FIPS 140-3](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id-bottlerocket.html) | Bottlerocket AMIs are available that are preconfigured to use FIPS 140-3 validated cryptographic modules. This includes the Amazon Linux 2023 Kernel Crypto API Cryptographic Module and the AWS-LC Cryptographic Module. | November 20, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Updated `AWSServiceRoleForAmazonEKSNodegroup` policy to allow `ec2:RebootInstances` for instances created by Amazon EKS managed node groups. Restricted the `ec2:CreateTags` permissions for Amazon EC2 resources. | November 20, 2024 | 
| [Observability dashboard](https://docs.aws.amazon.com/eks/latest/userguide/observability-dashboard.html) | The observability dashboard helps you to quickly detect, troubleshoot, and remediate issues. There are also new [CloudWatch vended metrics](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html) available in the `AWS/EKS` namespace. | November 18, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS updated AWS managed policy `AmazonEKSServiceRolePolicy`. Added permissions for EKS access policies, load balancer management, and automated cluster resource cleanup. | November 16, 2024 | 
| [New role creation in console for add-ons that support EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/creating-an-add-on.html#_create_add_on_console) | There are new steps when using the console to create or update add-ons that support EKS Pod Identities where you can automatically generate IAM roles with the appropriate name, role policy, and trust policy for the add-on. | November 15, 2024 | 
| [Managed node groups in AWS Local Zones](https://docs.aws.amazon.com/eks/latest/userguide/local-zones.html) | Managed node groups can now be created in AWS Local Zones. | November 15, 2024 | 
| [New metrics are available](https://docs.aws.amazon.com/eks/latest/userguide/view-raw-metrics.html) | There are new metrics available under the API group `metrics.eks.amazonaws.com`. | November 11, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS updated AWS managed policy `AmazonEKSComputePolicy`. Updated resource permissions for the `iam:AddRoleToInstanceProfile` action. | November 7, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS added a new AWS managed policy: `AmazonEKSComputePolicy`  | November 1, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSClusterPolicy`. Added `ec2:DescribeInstanceTopology` permission to allow Amazon EKS to attach topology information to the node as labels. | November 1, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS added a new AWS managed policy: `AmazonEKSBlockStoragePolicy`  | October 30, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS added a new AWS managed policy: `AmazonEKSLoadBalancingPolicy`  | October 30, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `cloudwatch:PutMetricData` permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to publish metrics to Amazon CloudWatch. | October 29, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | EKS added a new AWS managed policy: `AmazonEKSNetworkingPolicy`  | October 28, 2024 | 
| [Dual-stack endpoints for new `IPv6` clusters](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html) | Connect to new `IPv6` clusters with a `eks-cluster.region.api.aws` endpoint that is dual-stack. This endpoint is returned when you describe these clusters. `kubectl` and other Kubernetes API clients in `IPv4`, `IPv6`, or dual-stack environments can resolve and connect to these endpoints for public or private clusters. | October 21, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added `autoscaling:ResumeProcesses`, `autoscaling:SuspendProcesses`, and associated permissions to `AWSServiceRoleForAmazonEKSNodegroup` in China regions to integrate with Amazon Application Recovery Controller for EKS. No changes to other regions. | October 21, 2024 | 
| [AL2023 accelerated AMIs](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html) | You can now use accelerated `NVIDIA` and AWS Neuron instances for AMIs based on AL2023. | October 11, 2024 | 
| [New source format](#doc-history) | We have switched over to a new source format with some layout changes. There are temporary minor formatting issues that we are addressing. | October 10, 2024 | 
| [AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | Added permissions to `AmazonEKSServicePolicy` and `AmazonEKSServiceRolePolicy`. Added `ec2:GetSecurityGroupsForVpc` and associated tag permissions to allow EKS to read security group information and update related tags. | October 10, 2024 | 
| [AWS managed policy updates - New policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | EKS added a new AWS managed policy. | October 3, 2024 | 
| [Kubernetes version `1.31`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-31) | Added Kubernetes version `1.31` support for new clusters and version upgrades. | September 24, 2024 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | August 21, 2024 | 
| [Kubernetes version 1.29 is now available for local clusters on AWS Outposts](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html) | You can now create an Amazon EKS local cluster on an AWS Outposts using Kubernetes version 1.29. | August 20, 2024 | 
| [EKS Pod Identity in AWS GovCloud (US)](https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html) | Amazon EKS Pod Identities associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs. Unlike IAM roles for service accounts, EKS Pod Identities are completely inside EKS; you don’t need an OIDC identity provider. | August 14, 2024 | 
| [Scenario-driven content updates](#doc-history) | We renamed and updated topics to be more scenario-driven throughout the entire guide. | August 9, 2024 | 
| [Dual-stack VPC interface endpoints for Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html) | You can now create dual-stack VPC interface endpoints for Amazon EKS with both `IPv4` and `IPv6` IP addresses and DNS names. | August 7, 2024 | 
| [New dual-stack endpoints for the Amazon EKS APIs with `IPv6` addresses](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html) | The EKS API for creating and managing clusters, and the OIDC issuer URLs for clusters have new dual-stack endpoints. The new DNS name for the Amazon EKS API is `eks.region.api.aws` which resolves to `IPv4` addresses and `IPv6` addresses. New clusters have a new dual-stack OIDC issuer URL (`oidc-eks.region.api.aws`). | August 1, 2024 | 
| [Capacity Blocks for managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks-mng.html) | You can now use Capacity Blocks for managed node groups. | July 1, 2024 | 
| [Auto Scaling Group metrics collection enabled by default](https://docs.aws.amazon.com/eks/latest/userguide/enable-asg-metrics.html) | Amazon EKS managed node groups now have Amazon EC2 Auto Scaling group metrics enabled by default with no additional charge. Previously, you had to do several steps to enable this feature. | June 28, 2024 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | June 27, 2024 | 
| [Kubernetes version `1.26`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Kubernetes version `1.26` is now in extended support. | June 12, 2024 | 
| [Improvements to AMI information references](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-amis.html) | We made improvements to the AMI information references, in particular for Bottlerocket. | June 12, 2024 | 
| [Kubernetes version `1.30`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-30) | Added Kubernetes version `1.30` support for new clusters and version upgrades. | May 23, 2024 | 
| [CoreDNS Autoscaling](https://docs.aws.amazon.com/eks/latest/userguide/coredns-autoscaling.html) | CoreDNS autoscaler will dynamically adapt the number of replicas of the CoreDNS deployment in an EKS cluster based on the number of nodes and CPU cores. This feature works for CoreDNS `v1.9` and the latest platform version of EKS release version `1.25` and later. | May 14, 2024 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.29.4`, `1.28.9`, and `1.27.13`. | May 14, 2024 | 
| [CloudWatch Container Insights support for Windows](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html) | The Amazon CloudWatch Observability Operator add-on now also allows Container Insights on Windows worker nodes in the cluster. | April 10, 2024 | 
| [Kubernetes concepts](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-concepts.html) | Added new Kubernetes concepts topic. | April 5, 2024 | 
| [Restructure Access and IAM Content](https://docs.aws.amazon.com/eks/latest/userguide/cluster-auth.html) | Move existing pages related to access and IAM topics, such as auth config map, access entries, Pod ID, and IRSA into new section. Revise overview content. | April 2, 2024 | 
| [Bottlerocket OS support for Amazon S3 CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html) | The Mountpoint for Amazon S3 CSI driver is now compatible with Bottlerocket. | March 13, 2024 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | March 4, 2024 | 
| [Amazon Linux 2023](https://docs.aws.amazon.com/eks/latest/userguide/al2023.html) | Amazon Linux 2023 (AL2023) is a new Linux-based operating system designed to provide a secure, stable, and high-performance environment for your cloud applications. | February 29, 2024 | 
| [EKS Pod Identity and IRSA support sidecars in Kubernetes `1.29`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29) | In Kubernetes `1.29`, sidecar containers are available in Amazon EKS clusters. Sidecar containers are supported with IAM roles for service accounts or EKS Pod Identity. For more information about sidecars, see [Sidecar Containers](https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/) in the Kubernetes documentation. | February 26, 2024 | 
| [Kubernetes version `1.29`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-29) | Added Kubernetes version `1.29` support for new clusters and version upgrades. | January 23, 2024 | 
| [Full release: Amazon EKS Extended Support for Kubernetes versions](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Extended Kubernetes version support allows you to stay at a specific Kubernetes version for longer than 14 months. | January 16, 2024 | 
| [Amazon EKS cluster health detection in the AWS Cloud](https://docs.aws.amazon.com/eks/latest/userguide/troubleshooting.html#cluster-health-status) | Amazon EKS detects issues with your Amazon EKS clusters and the infrastructure of the cluster prerequisites in *cluster health*. You can view the issues with your EKS clusters in the AWS Management Console and in the `health` of the cluster in the EKS API. These issues are in addition to the issues that are detected by and displayed by the console. Previously, cluster health was only available for local clusters on AWS Outposts. | December 28, 2023 | 
| [Cluster insights](https://docs.aws.amazon.com/eks/latest/userguide/cluster-insights.html) | You can now get recommendations on your cluster based on recurring checks. | December 20, 2023 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Canada West (Calgary) (`ca-west-1`) AWS Region. | December 20, 2023 | 
| [You can now grant IAM roles and users access to your cluster using access entries](https://docs.aws.amazon.com/eks/latest/userguide/access-entries.html) | Before the introduction of access entries, you granted IAM roles and users access to your cluster by adding entries to the `aws-auth` `ConfigMap`. Now each cluster has an access mode, and you can switch to using access entries on your schedule. After you switch modes, you can add users by adding access entries in the AWS CLI, AWS CloudFormation, and the AWS SDKs. | December 18, 2023 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes new patch versions of Kubernetes `1.28.4`, `1.27.8`, `1.26.11`, and `1.25.16`. | December 12, 2023 | 
| [Mountpoint for Amazon S3 CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/s3-csi.html) | You can now install the Mountpoint for Amazon S3 CSI driver on Amazon EKS clusters. | November 27, 2023 | 
| [Turn on Prometheus metrics when creating a cluster](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html) | In the AWS Management Console, you can now turn on Prometheus metrics when creating a cluster. You can also view Prometheus scraper details in the **Observability** tab. | November 26, 2023 | 
| [Amazon EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/pod-identites.html) | Amazon EKS Pod Identities associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs. Unlike IAM roles for service accounts, EKS Pod Identities are completely inside EKS; you don’t need an OIDC identity provider. | November 26, 2023 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | November 26, 2023 | 
| [CSI snapshot controller](https://docs.aws.amazon.com/eks/latest/userguide/csi-snapshot-controller.html) | You can now install the CSI snapshot controller for use with compatible CSI drivers, such as the Amazon EBS CSI driver. | November 17, 2023 | 
| [ADOT Operator topic rewrite](https://docs.aws.amazon.com/eks/latest/userguide/opentelemetry.html) | The Amazon EKS add-on support for ADOT Operator section was redundant with the AWS Distro for OpenTelemetry documentation. We migrated remaining essential information to that resource to reduce outdated and inconsistent information. | November 14, 2023 | 
| [CoreDNS EKS add-on support for Prometheus metrics](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html) | The `v1.10.1-eksbuild.5`, `v1.9.3-eksbuild.9`, and `v1.8.7-eksbuild.8` versions of the EKS add-on for CoreDNS expose the port that CoreDNS published metrics to, in the `kube-dns` service. This makes it easier to include the CoreDNS metrics in your monitoring systems. | November 10, 2023 | 
| [Amazon EKS CloudWatch Observability Operator add-on](https://docs.aws.amazon.com/eks/latest/userguide/cloudwatch.html) | Added Amazon EKS CloudWatch Observability Operator page. | November 6, 2023 | 
| [Capacity Blocks for self-managed P5 instances in US East (Ohio)](https://docs.aws.amazon.com/eks/latest/userguide/capacity-blocks.html) | In US East (Ohio), you can now use Capacity Blocks for self-managed P5 instances. | October 31, 2023 | 
| [Clusters support modifying subnets and security groups](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html) | You can update the cluster to change which subnets and security groups the cluster uses. You can update from the AWS Management Console, the latest version of the AWS CLI, AWS CloudFormation, and `eksctl` version `v0.164.0-rc.0` or later. You might need to do this to provide subnets with more available IP addresses to successfully upgrade a cluster version. | October 24, 2023 | 
| [Cluster role and managed node group role supports customer managed AWS Identity and Access Management policies](https://docs.aws.amazon.com/eks/latest/userguide/cluster-iam-role.html) | You can use a custom IAM policy on the cluster role, instead of the [AmazonEKSClusterPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEKSClusterPolicy.html) AWS managed policy. Also, you can use a custom IAM policy on the node role in a managed node group, instead of the [AmazonEKSWorkerNodePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEKSWorkerNodePolicy.html) AWS managed policy. Do this to create a policy with the least privilege to meet strict compliance requirements. | October 23, 2023 | 
| [Fix link to eksctl installation](#doc-history) | Fix install link for eksctl after the page was moved. | October 6, 2023 | 
| [Preview release: Amazon EKS Extended Support for Kubernetes versions](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Extended Kubernetes version support allows you to stay at a specific Kubernetes version for longer than 14 months. | October 4, 2023 | 
| [Remove references to AWS App Mesh integration](#doc-history) | Amazon EKS integrations with AWS App Mesh remain for existing customers of App Mesh only. | September 29, 2023 | 
| [Kubernetes version `1.28`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-28) | Added Kubernetes version `1.28` support for new clusters and version upgrades. | September 26, 2023 | 
| [Existing clusters support Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html) | You can use Kubernetes *network policy* in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes *network policy* in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. | September 15, 2023 | 
| [CoreDNS Amazon EKS add-on supports modifying PDB](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html) | You can modify the `PodDisruptionBudget` of the EKS add-on for CoreDNS in versions `v1.9.3-eksbuild.7` and later and `v1.10.1-eksbuild.4` and later. | September 15, 2023 | 
| [Amazon EKS support for shared subnets](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html#network-requirements-shared) | New [Shared subnet requirements and considerations](https://docs.aws.amazon.com/eks/latest/userguide/network-reqs.html#network-requirements-shared) for making Amazon EKS clusters in shared subnets. | September 7, 2023 | 
| [Updates to What is Amazon EKS?](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html) | Added new [Common use cases](https://docs.aws.amazon.com/eks/latest/userguide/common-use-cases.html) and [Architecture](https://docs.aws.amazon.com/eks/latest/userguide/eks-architecture.html) topics. Refreshed other topics. | September 6, 2023 | 
| [Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html) | You can use Kubernetes *network policy* with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes *network policy* with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. | August 29, 2023 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Israel (Tel Aviv) (`il-central-1`) AWS Region. | August 1, 2023 | 
| [Configurable ephemeral storage for Fargate](https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-configuration.html#fargate-storage) | You can increase the total amount of ephemeral storage for each Pod running on Amazon EKS Fargate. | July 31, 2023 | 
| [Add-on support for Amazon EFS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html#add-ons-aws-efs-csi-driver) | You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon EFS CSI driver. | July 26, 2023 | 
| [AWS managed policy updates - New policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS added a new AWS managed policy. | July 26, 2023 | 
| [Kubernetes version updates for 1.27, 1.26, 1.25, and 1.24 are now available for local clusters on AWS Outposts](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-platform-versions.html) | Kubernetes version updates to 1.27.3, 1.26.6, 1.25.11, and 1.24.15 are now available for local clusters on AWS Outposts | July 20, 2023 | 
| [IP prefixes support for Windows nodes](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html) | Assigning IP prefixes to your nodes can enable you to host a significantly higher number of Pods on your nodes than you can when assigning individual secondary IP addresses to your nodes. | July 6, 2023 | 
| [Amazon FSx for OpenZFS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/fsx-openzfs-csi.html) | You can now install the Amazon FSx for OpenZFS CSI driver on Amazon EKS clusters. | June 30, 2023 | 
| [Pods on Linux nodes in `IPv4` clusters can now communicate with `IPv6` endpoints.](https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6-egress.html) | After assigning an IPv6 address to your node, your Pods' `IPv4` address is network address translated to the `IPv6` address of the node that it’s running on. | June 19, 2023 | 
| [Windows managed node groups in AWS GovCloud (US) Regions](https://docs.aws.amazon.com/eks/latest/userguide/create-managed-node-group.html) | In the AWS GovCloud (US) Regions, Amazon EKS managed node groups can now run Windows containers. | May 30, 2023 | 
| [Kubernetes version `1.27`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1-27) | Added Kubernetes version `1.27` support for new clusters and version upgrades. | May 24, 2023 | 
| [Kubernetes version `1.26`](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Added Kubernetes version `1.26` support for new clusters and version upgrades. | April 11, 2023 | 
| [Domainless gMSA](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html#ad-and-gmsa-support) | You can now use domainless gMSA with Windows Pods. | March 27, 2023 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Melbourne) (`ap-southeast-4`) AWS Region. | March 10, 2023 | 
| [Amazon File Cache CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/file-cache-csi.html) | You can now install the Amazon File Cache CSI driver on Amazon EKS clusters. | March 3, 2023 | 
| [Kubernetes version 1.25 is now available for local clusters on AWS Outposts](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html) | You can now create an Amazon EKS local cluster on an Outpost using Kubernetes versions `1.22` – `1.25`. | March 1, 2023 | 
| [Kubernetes version `1.25`](#doc-history) | Added Kubernetes version `1.25` support for new clusters and version upgrades. | February 22, 2023 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | February 7, 2023 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Hyderabad) (`ap-south-2`), Europe (Zurich) (`eu-central-2`), and Europe (Spain) (`eu-south-2`) AWS Regions. | February 6, 2023 | 
| [Kubernetes versions `1.21` – `1.24` are now available for local clusters on AWS Outposts.](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html) | You can now create an Amazon EKS local cluster on an Outpost using Kubernetes versions `1.21` – `1.24`. Previously, only version `1.21` was available. | January 17, 2023 | 
| [Amazon EKS now supports AWS PrivateLink](https://docs.aws.amazon.com/eks/latest/userguide/vpc-interface-endpoints.html) | You can use an AWS PrivateLink to create a private connection between your VPC and Amazon EKS. | December 16, 2022 | 
| [Managed node group Windows support](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html) | You can now use Windows for Amazon EKS managed node groups. | December 15, 2022 | 
| [Amazon EKS add-ons from independent software vendors are now available in the AWS Marketplace](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html) | You can now browse and subscribe to Amazon EKS add-ons from independent software vendors through the AWS Marketplace. | November 28, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | November 17, 2022 | 
| [Kubernetes version `1.24`](#doc-history) | Added Kubernetes version `1.24` support for new clusters and version upgrades. | November 15, 2022 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Middle East (UAE) (`me-central-1`) AWS Region. | November 3, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | October 24, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | October 20, 2022 | 
| [Local clusters on AWS Outposts are now available](https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts-local-cluster-create.html) | You can now create an Amazon EKS local cluster on an Outpost. | September 19, 2022 | 
| [Fargate vCPU based quotas](https://docs.aws.amazon.com/eks/latest/userguide/service-quotas.html#service-quotas-eks-fargate) | Fargate is transitioning from Pod based quotas to vCPU based quotas. | September 8, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | August 31, 2022 | 
| [Cost monitoring](https://docs.aws.amazon.com/eks/latest/userguide/cost-monitoring) | Amazon EKS now supports Kubecost, which enables you to monitor costs broken down by Kubernetes resources including Pods, nodes, namespaces, and labels. | August 24, 2022 | 
| [AWS managed policy updates - New policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS added a new AWS managed policy. | August 24, 2022 | 
| [AWS managed policy updates - New policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS added a new AWS managed policy. | August 23, 2022 | 
| [Tag resources for billing](https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html#tag-resources-for-billing) | Added `aws:eks:cluster-name` generated cost allocation tag support for all clusters. | August 16, 2022 | 
| [Fargate profile wildcards](https://docs.aws.amazon.com/eks/latest/userguide/fargate-profile.html#fargate-profile-wildcards) | Added support for Fargate profile wildcards in the selector criteria for namespaces, label keys, and label values. | August 16, 2022 | 
| [Kubernetes version `1.23`](#doc-history) | Added Kubernetes version `1.23` support for new clusters and version upgrades. | August 11, 2022 | 
| [View Kubernetes resources in the AWS Management Console](https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html) | You can now view information about the Kubernetes resources deployed to your cluster using the AWS Management Console. | May 3, 2022 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Jakarta) (`ap-southeast-3`) AWS Region. | May 2, 2022 | 
| [Observability page and ADOT add-on support](https://docs.aws.amazon.com/eks/latest/userguide/eks-observe.html) | Added Observability page and AWS Distro for OpenTelemetry (ADOT). | April 21, 2022 | 
| [Kubernetes version `1.22`](#doc-history) | Added Kubernetes version `1.22` support for new clusters and version upgrades. | April 4, 2022 | 
| [AWS managed policy updates - New policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS added a new AWS managed policy. | April 4, 2022 | 
| [Added Fargate Pod patching details](https://docs.aws.amazon.com/eks/latest/userguide/fargate-pod-patching.html) | When upgrading Fargate Pods, Amazon EKS first tries to evict Pods based on your Pod disruption budgets. You can create event rules to react to failed evictions before the Pods are deleted. | April 1, 2022 | 
| [Full release: Add-on support for Amazon EBS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html) | You can now use the AWS Management Console, AWS CLI, and API to manage the Amazon EBS CSI driver. | March 31, 2022 | 
| [AWS Outposts content update](https://docs.aws.amazon.com/eks/latest/userguide/outposts.html) | Instructions to deploy an Amazon EKS cluster on AWS Outposts. | March 22, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | March 21, 2022 | 
| [Windows `containerd` support](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-windows-ami.html.html) | You can now select the `containerd` runtime for Windows nodes. | March 14, 2022 | 
| [Added Amazon EKS Connector considerations to security documentation](https://docs.aws.amazon.com/eks/latest/userguide/connector-considerations.html) | Describes the shared responsibility model as it relates to connected clusters. | February 25, 2022 | 
| [Assign `IPv6` addresses to your Pods and services](https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6.html) | You can now create a `1.21` or later cluster that assigns `IPv6` addresses to your Pods and services. | January 6, 2022 | 
| [AWS managed policy updates - Update to an existing policy](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Amazon EKS updated an existing AWS managed policy. | December 13, 2021 | 
| [Preview release: Add-on support for Amazon EBS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html) | You can now preview using the AWS Management Console, AWS CLI, and API to manage the Amazon EBS CSI driver. | December 9, 2021 | 
| [Karpenter autoscaler support](https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html#karpenter) | You can now use the Karpenter open-source project to autoscale your nodes. | November 29, 2021 | 
| [Fluent Bit Kubernetes filter support in Fargate logging](https://docs.aws.amazon.com/eks/latest/userguide/fargate-logging.html#fargate-logging-kubernetes-filter) | You can now use the Fluent Bit Kubernetes filter with Fargate logging. | November 10, 2021 | 
| [Windows support available in the control plane](https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html) | Windows support is now available in your control plane. You no longer need to enable it in your data plane. | November 9, 2021 | 
| [Bottlerocket added as an AMI type for managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami-bottlerocket.html) | Previously, Bottlerocket was only available as a self-managed node option. Now it can be configured as a managed node group, reducing the effort that’s required to meet node compliance requirements. | October 28, 2021 | 
| [DL1 driver support](https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html) | Custom Amazon Linux AMIs now support deep learning workloads for Amazon Linux 2. This enablement allows a generic on-premises or cloud baseline configuration. | October 25, 2021 | 
| [VT1 video support](https://docs.aws.amazon.com/eks/latest/userguide/eks-ami-build-scripts.html) | Custom Amazon Linux AMIs now support VT1 for some distributions. This enablement advertises Xilinx U30 devices on your Amazon EKS cluster. | September 13, 2021 | 
| [Amazon EKS Connector is now available](https://docs.aws.amazon.com/eks/latest/userguide/eks-connector.html) | You can use Amazon EKS Connector to register and connect any conformant Kubernetes cluster to AWS and visualize it in the Amazon EKS console. | September 8, 2021 | 
| [Amazon EKS Anywhere is now available](https://docs.aws.amazon.com/eks/latest/userguide/eks-deployment-options.html) | Amazon EKS Anywhere is a new deployment option for Amazon EKS that you can use to create and operate Kubernetes clusters on-premises. | September 8, 2021 | 
| [Amazon FSx for NetApp ONTAP CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/fsx-ontap.html) | Added topic that summarizes the Amazon FSx for NetApp ONTAP CSI driver and gives links to other references. | September 2, 2021 | 
| [Managed node groups now auto-calculates the Amazon EKS recommended maximum Pods for nodes](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html) | Managed node groups now auto-calculate the Amazon EKS maximum Pods for nodes that you deploy without a launch template, or with a launch template that you haven’t specified an AMI ID in. | August 30, 2021 | 
| [Remove Amazon EKS management of add-on settings without removing the Amazon EKS add-on software](https://docs.aws.amazon.com/eks/latest/userguide/managing-vpc-cni.html#removing-vpc-cni-eks-add-on) | You can now remove an Amazon EKS add-on without removing the add-on software from your cluster. | August 20, 2021 | 
| [Create multi-homed Pods using Multus](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html) | You can now add multiple network interfaces to a Pod using Multus. | August 2, 2021 | 
| [Add more IP addresses to your Linux Amazon EC2 nodes](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html) | You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node. You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node. | July 27, 2021 | 
| [`containerd` runtime bootstrap](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | The Amazon EKS optimized accelerated Amazon Linux Amazon Machine Image (AMI) now contains a bootstrap flag that you can use to enable the `containerd` runtime in Amazon EKS optimized and Bottlerocket AMIs. This flag is available in all supported Kubernetes versions of the AMI. | July 19, 2021 | 
| [Kubernetes version `1.21`](#doc-history) | Added Kubernetes version `1.21` support. | July 19, 2021 | 
| [Added managed policies topic](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html) | A list of all Amazon EKS IAM managed policies and changes that were made to them since June 17, 2021. | June 17, 2021 | 
| [Use security groups for Pods with Fargate](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html) | You can now use security groups for Pods with Fargate, in addition to using them with Amazon EC2 nodes. | June 1, 2021 | 
| [Added CoreDNS and `kube-proxy` Amazon EKS add-ons](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html) | Amazon EKS can now help you manage the CoreDNS and `kube-proxy` Amazon EKS add-ons for your cluster. | May 19, 2021 | 
| [Kubernetes version `1.20`](#doc-history) | Added Kubernetes version `1.20` support for new clusters and version upgrades. | May 18, 2021 | 
| [AWS Load Balancer Controller `2.2.0` released](https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html) | You can now use the AWS Load Balancer Controller to create Elastic Load Balancers using instance or IP targets. | May 14, 2021 | 
| [Node taints for managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/node-taints-managed-node-groups.html) | Amazon EKS now supports adding node taints to managed node groups. | May 11, 2021 | 
| [Secrets encryption for existing clusters](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#enable-kms) | Amazon EKS now supports adding [secrets encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/) to existing clusters. | February 26, 2021 | 
| [Kubernetes version `1.19`](#doc-history) | Added Kubernetes version `1.19` support for new clusters and version upgrades. | February 16, 2021 | 
| [Amazon EKS now supports OpenID Connect (OIDC) identity providers as a method to authenticate users to a version `1.16` or later cluster.](https://docs.aws.amazon.com/eks/latest/userguide/authenticate-oidc-identity-provider.html) | OIDC identity providers can be used with, or as an alternative to AWS Identity and Access Management (IAM). | February 12, 2021 | 
| [View node and workload resources in the AWS Management Console](https://docs.aws.amazon.com/eks/latest/userguide/view-kubernetes-resources.html) | You can now view details about your managed, self-managed, and Fargate nodes and your deployed Kubernetes workloads in the AWS Management Console. | December 1, 2020 | 
| [Deploy Spot Instance types in a managed node group](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html#managed-node-group-capacity-types) | You can now deploy multiple Spot or On-Demand Instance types to a managed node group. | December 1, 2020 | 
| [Amazon EKS can now manage specific add-ons for your cluster](https://docs.aws.amazon.com/eks/latest/userguide/eks-add-ons.html) | You can manage add-ons yourself, or allow Amazon EKS to control the launch and version of an add-on through the Amazon EKS API. | December 1, 2020 | 
| [Share an ALB across multiple Ingresses](https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html) | You can now share an AWS Application Load Balancer (ALB) across multiple Kubernetes Ingresses. In the past, you had to deploy a separate ALB for each Ingress. | October 23, 2020 | 
| [NLB IP target support](https://docs.aws.amazon.com/eks/latest/userguide/networkg-load-balancing.html#network-load-balancer) | You can now deploy a Network Load Balancer with IP targets. This means that you can use an NLB to load balance network traffic to Fargate Pods and directly to Pods that are running on Amazon EC2 nodes. | October 23, 2020 | 
| [Kubernetes version `1.18`](#doc-history) | Added Kubernetes version `1.18` support for new clusters and version upgrades. | October 13, 2020 | 
| [Specify a custom CIDR block for Kubernetes service IP address assignment.](https://docs.aws.amazon.com/eks/latest/userguide/create-cluster.html) | You can now specify a custom CIDR block that Kubernetes assigns service IP addresses from. | September 29, 2020 | 
| [Assign security groups to individual Pods](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html) | You can now associate different security groups to some of the individual Pods that are running on many Amazon EC2 instance types. | September 9, 2020 | 
| [Deploy Bottlerocket on your nodes](https://docs.aws.amazon.com/eks/latest/userguide/launch-node-bottlerocket.html) | You can now deploy nodes that are running [Bottlerocket](https://aws.amazon.com/bottlerocket/). | August 31, 2020 | 
| [The ability to launch Arm nodes is generally available](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html#arm-ami) | You can now launch Arm nodes in managed and self-managed node groups. | August 17, 2020 | 
| [Managed node group launch templates and custom AMI](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) | You can now deploy a managed node group that uses an Amazon EC2 launch template. The launch template can specify a custom AMI, if you choose. | August 17, 2020 | 
| [EFS support for AWS Fargate](https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html) | You can now use Amazon EFS with AWS Fargate. | August 17, 2020 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | This is a new platform version with security fixes and enhancements. This includes UDP support for services of type `LoadBalancer` when using Network Load Balancers with Kubernetes version `1.15` or later. For more information, see the [Allow UDP for AWS Network Load Balancer](https://github.com/kubernetes/kubernetes/pull/92109) issue on GitHub. | August 12, 2020 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Africa (Cape Town) (`af-south-1`) and Europe (Milan) (`eu-south-1`) AWS Regions. | August 6, 2020 | 
| [Fargate usage metrics](https://docs.aws.amazon.com/eks/latest/userguide/monitoring-fargate-usage.html) |  AWS Fargate provides CloudWatch usage metrics that provide visibility into your account’s usage of Fargate On-Demand resources. | August 3, 2020 | 
| [Kubernetes version `1.17`](#doc-history) | Added Kubernetes version `1.17` support for new clusters and version upgrades. | July 10, 2020 | 
| [Create and manage App Mesh resources from within Kubernetes with the App Mesh controller for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/mesh-k8s-integration.html) | You can create and manage App Mesh resources from within Kubernetes. The controller also automatically injects the Envoy proxy and init containers into Pods that you deploy. | June 18, 2020 | 
| [Amazon EKS now supports Amazon EC2 Inf1 nodes](https://docs.aws.amazon.com/eks/latest/userguide/inferentia-support.html) | You can add Amazon EC2 Inf1 nodes to your cluster. | June 4, 2020 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the AWS GovCloud (US-East) (`us-gov-east-1`) and AWS GovCloud (US-West) (`us-gov-west-1`) AWS Regions. | May 13, 2020 | 
| [Kubernetes `1.12` is no longer supported on Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) | Kubernetes version `1.12` is no longer supported on Amazon EKS. Update any `1.12` clusters to version `1.13` or later to avoid service interruption. | May 12, 2020 | 
| [Kubernetes version `1.16`](#doc-history) | Added Kubernetes version `1.16` support for new clusters and version upgrades. | April 30, 2020 | 
| [Added the **AWSServiceRoleForAmazonEKS** service-linked role](https://docs.aws.amazon.com/eks/latest/userguide/using-service-linked-roles-eks.html) | Added the **AWSServiceRoleForAmazonEKS** service-linked role. | April 16, 2020 | 
| [Kubernetes version `1.15`](#doc-history) | Added Kubernetes version `1.15` support for new clusters and version upgrades. | March 10, 2020 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Beijing (`cn-north-1`) and Ningxia (`cn-northwest-1`) AWS Regions. | February 26, 2020 | 
| [FSx for Lustre CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/fsx-csi.html) | Added topic for installing the FSx for Lustre CSI driver on Kubernetes `1.14` Amazon EKS clusters. | December 23, 2019 | 
| [Restrict network access to the public access endpoint of a cluster](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html) | With this update, you can use Amazon EKS to restrict the CIDR ranges that can communicate to the public access endpoint of the Kubernetes API server. | December 20, 2019 | 
| [Resolve the private access endpoint address for a cluster from outside of a VPC](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html) | With this update, you can use Amazon EKS to resolve the private access endpoint of the Kubernetes API server from outside of a VPC. | December 13, 2019 | 
| [(Beta) Amazon EC2 A1 Amazon EC2 instance nodes](https://docs.aws.amazon.com/eks/latest/userguide/arm-support.html) | Launch [Amazon EC2 A1](https://aws.amazon.com/ec2/instance-types/a1/) Amazon EC2 instance nodes that register with your Amazon EKS cluster. | December 4, 2019 | 
| [Creating a cluster on AWS Outposts](https://docs.aws.amazon.com/eks/latest/userguide/eks-on-outposts.html) | Amazon EKS now supports creating clusters on AWS Outposts. | December 3, 2019 | 
| [AWS Fargate on Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/fargate.html) | Amazon EKS Kubernetes clusters now support running Pods on Fargate. | December 3, 2019 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Canada (Central) (`ca-central-1`) AWS Region. | November 21, 2019 | 
| [Managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html) | Amazon EKS managed node groups automate the provisioning and lifecycle management of nodes (Amazon EC2 instances) for Amazon EKS Kubernetes clusters. | November 18, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform versions to address [CVE-2019-11253](https://groups.google.com/forum/#!msg/kubernetes-security-announce/jk8polzSUxs/dfq6a-MnCQAJ). | November 6, 2019 | 
| [Kubernetes `1.11` is no longer supported on Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) | Kubernetes version `1.11` is no longer supported on Amazon EKS. Please update any `1.11` clusters to version `1.12` or higher to avoid service interruption. | November 4, 2019 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the South America (São Paulo) (`sa-east-1`) AWS Region. | October 16, 2019 | 
| [Windows support](https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html) | Amazon EKS clusters running Kubernetes version `1.14` now support Windows workloads. | October 7, 2019 | 
| [Autoscaling](https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html) | Added a chapter to cover some of the different types of Kubernetes autoscaling that are supported on Amazon EKS clusters. | September 30, 2019 | 
| [Kubernetes Dashboard update](https://docs.aws.amazon.com/eks/latest/userguide/dashboard-tutorial.html) | Updated topic for installing the Kubernetes Dashboard on Amazon EKS clusters to use the beta `2.0` version. | September 28, 2019 | 
| [Amazon EFS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html) | Added topic for installing the Amazon EFS CSI driver on Kubernetes `1.14` Amazon EKS clusters. | September 19, 2019 | 
| [Amazon EC2 Systems Manager parameter for Amazon EKS optimized AMI ID](https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html) | Added topic for retrieving the Amazon EKS optimized AMI ID using an Amazon EC2 Systems Manager parameter. The parameter eliminates the need for you to look up AMI IDs. | September 18, 2019 | 
| [Amazon EKS resource tagging](https://docs.aws.amazon.com/eks/latest/userguide/eks-using-tags.html) | You can manage the tagging of your Amazon EKS clusters. | September 16, 2019 | 
| [Amazon EBS CSI driver](https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi.html) | Added topic for installing the Amazon EBS CSI driver on Kubernetes `1.14` Amazon EKS clusters. | September 9, 2019 | 
| [New Amazon EKS optimized AMI patched for `CVE-2019-9512` and `CVE-2019-9514`](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to address [CVE-2019-9512 and CVE-2019-9514](https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA). | September 6, 2019 | 
| [Announcing deprecation of Kubernetes `1.11` in Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Amazon EKS discontinued support for Kubernetes version `1.11` on November 4, 2019. | September 4, 2019 | 
| [Kubernetes version `1.14`](#doc-history) | Added Kubernetes version `1.14` support for new clusters and version upgrades. | September 3, 2019 | 
| [IAM roles for service accounts](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html) | With IAM roles for service accounts on Amazon EKS clusters, you can associate an IAM role with a Kubernetes service account. With this feature, you no longer need to provide extended permissions to the node IAM role. This way, Pods on that node can call AWS APIs. | September 3, 2019 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Middle East (Bahrain) (`me-south-1`) AWS Region. | August 29, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform versions to address [CVE-2019-9512 and CVE-2019-9514](https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA). | August 28, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform versions to address [CVE-2019-11247 and CVE-2019-11249](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM). | August 5, 2019 | 
| [Amazon EKS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Hong Kong) (`ap-east-1`) AWS Region. | July 31, 2019 | 
| [Kubernetes `1.10` no longer supported on Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) | Kubernetes version `1.10` is no longer supported on Amazon EKS. Update any `1.10` clusters to version `1.11` or higher to avoid service interruption. | July 30, 2019 | 
| [Added topic on ALB ingress controller](https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html) | The AWS ALB Ingress Controller for Kubernetes is a controller that causes an ALB to be created when ingress resources are created. | July 11, 2019 | 
| [New Amazon EKS optimized AMI](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Removing unnecessary `kubectl` binary from AMIs. | July 3, 2019 | 
| [Kubernetes version `1.13`](#doc-history) | Added Kubernetes version `1.13` support for new clusters and version upgrades. | June 18, 2019 | 
| [New Amazon EKS optimized AMI patched for `AWS-2019-005`](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to address the vulnerabilities that are described in link:security/security-bulletins/AWS-2019-005/[AWS-2019-005,type="marketing"]. | June 17, 2019 | 
| [Announcing discontinuation of support of Kubernetes `1.10` in Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html) | Amazon EKS stopped supporting Kubernetes version `1.10` on July 22, 2019. | May 21, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform version for Kubernetes `1.11` and `1.10` clusters to support custom DNS names in the `kubelet` certificate and improve `etcd` performance. | May 21, 2019 | 
| [Getting started with `eksctl`](https://docs.aws.amazon.com/eks/latest/userguide/getting-started-eksctl.html) | This getting started guide describes how you can install all of the required resources to get started with Amazon EKS using `eksctl`. This is a simple command line utility for creating and managing Kubernetes clusters on Amazon EKS. | May 10, 2019 | 
| [AWS CLI `get-token` command](#doc-history) | The `aws eks get-token` command was added to the AWS CLI. You no longer need to install the AWS IAM Authenticator for Kubernetes to create client security tokens for cluster API server communication. Upgrade your AWS CLI installation to the latest version to use this new functionality. For more information, see [Installing the AWS Command Line Interface](https://docs.aws.amazon.com/cli/latest/userguide/installing.html) in the * AWS Command Line Interface User Guide*. | May 10, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform version for Kubernetes `1.12` clusters to support custom DNS names in the `kubelet` certificate and improve `etcd` performance. This fixes a bug that caused node `kubelet` daemons to request a new certificate every few seconds. | May 8, 2019 | 
| [Prometheus tutorial](https://docs.aws.amazon.com/eks/latest/userguide/prometheus.html) | Added topic for deploying Prometheus to your Amazon EKS cluster. | April 5, 2019 | 
| [Amazon EKS control plane logging](https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html) | With this update, you can get audit and diagnostic logs directly from the Amazon EKS control pane. You can use these CloudWatch logs in your account as reference for securing and running clusters. | April 4, 2019 | 
| [Kubernetes version `1.12`](#doc-history) | Added Kubernetes version `1.12` support for new clusters and version upgrades. | March 28, 2019 | 
| [Added App Mesh getting started guide](https://docs.aws.amazon.com/eks/latest/userguide/mesh-gs-k8s.html) | Added documentation for getting started with App Mesh and Kubernetes. | March 27, 2019 | 
| [Amazon EKS API server endpoint private access](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html) | Added documentation for disabling public access for your Amazon EKS cluster’s Kubernetes API server endpoint. | March 19, 2019 | 
| [Added topic for installing the Kubernetes Metrics Server](https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html) | The Kubernetes Metrics Server is an aggregator of resource usage data in your cluster. | March 18, 2019 | 
| [Added list of related open source projects](https://docs.aws.amazon.com/eks/latest/userguide/metrics-server.html) | These open source projects extend the functionality of Kubernetes clusters running on AWS, including clusters that are managed by Amazon EKS. | March 15, 2019 | 
| [Added topic for installing Helm locally](https://docs.aws.amazon.com/eks/latest/userguide/helm.html) | The `helm` package manager for Kubernetes helps you install and manage applications on your Kubernetes cluster. This topic shows how to install and run the `helm` and `tiller` binaries locally. That way, you can install and manage charts using the Helm CLI on your local system. | March 11, 2019 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform version that updates Amazon EKS Kubernetes `1.11` clusters to patch level `1.11.8` to address [CVE-2019-1002100](https://discuss.kubernetes.io/t/kubernetes-security-announcement-v1-11-8-1-12-6-1-13-4-released-to-address-medium-severity-cve-2019-1002100/5147). | March 8, 2019 | 
| [Increased cluster limit](https://docs.aws.amazon.com/eks/latest/userguide/service_limits.html) | Amazon EKS has increased the number of clusters that you can create in an AWS Region from 3 to 50. | February 13, 2019 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Europe (London) (`eu-west-2`), Europe (Paris) (`eu-west-3`), and Asia Pacific (Mumbai) (`ap-south-1`) AWS Regions. | February 13, 2019 | 
| [New Amazon EKS optimized AMI patched for `ALAS-2019-1156`](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to address the vulnerability that’s described in [ALAS-2019-1156](https://alas.aws.amazon.com/ALAS-2019-1156.html). | February 11, 2019 | 
| [New Amazon EKS optimized AMI patched for `ALAS2-2019-1141`](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to address the CVEs that are referenced in [ALAS2-2019-1141](https://alas.aws.amazon.com/AL2/ALAS-2019-1141.html). | January 9, 2019 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Asia Pacific (Seoul) (`ap-northeast-2`) AWS Region. | January 9, 2019 | 
| [Amazon EKS region expansion](#doc-history) | Amazon EKS is now available in the following additional AWS Regions: Europe (Frankfurt) (`eu-central-1`), Asia Pacific (Tokyo) (`ap-northeast-1`), Asia Pacific (Singapore) (`ap-southeast-1`), and Asia Pacific (Sydney) (`ap-southeast-2`). | December 19, 2018 | 
| [Amazon EKS cluster updates](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) | Added documentation for Amazon EKS [cluster Kubernetes version updates](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) and [node replacement](https://docs.aws.amazon.com/eks/latest/userguide/update-workers.html). | December 12, 2018 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Europe (Stockholm) (`eu-north-1`) AWS Region. | December 11, 2018 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform version updating Kubernetes to patch level `1.10.11` to address link:security/security-bulletins/AWS-2018-020/[CVE-2018-1002105,type="marketing"]. | December 4, 2018 | 
| [Added version `1.0.0` support for the ALB ingress controller](#doc-history) | The ALB ingress controller releases version `1.0.0` with formal support from AWS. | November 20, 2018 | 
| [Added support for CNI network configuration](https://docs.aws.amazon.com/eks/latest/userguide/cni-custom-network.html) | The Amazon VPC CNI plugin for Kubernetes version `1.2.1` now supports custom network configuration for secondary Pod network interfaces. | October 16, 2018 | 
| [Added support for `MutatingAdmissionWebhook` and `ValidatingAdmissionWebhook`](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | Amazon EKS platform version `1.10-eks.2` now supports `MutatingAdmissionWebhook` and `ValidatingAdmissionWebhook` admission controllers. | October 10, 2018 | 
| [Added partner AMI information](https://docs.aws.amazon.com/eks/latest/userguide/eks-partner-amis.html) | Canonical has partnered with Amazon EKS to create node AMIs that you can use in your clusters. | October 3, 2018 | 
| [Added instructions for AWS CLI `update-kubeconfig` command](https://docs.aws.amazon.com/eks/latest/userguide/create-kubeconfig.html) | Amazon EKS has added the `update-kubeconfig` to the AWS CLI to simplify the process of creating a `kubeconfig` file for accessing your cluster. | September 21, 2018 | 
| [New Amazon EKS optimized AMIs](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMIs (with and without GPU support) to provide various security fixes and AMI optimizations. | September 13, 2018 | 
| [Amazon EKS AWS Region expansion](#doc-history) | Amazon EKS is now available in the Europe (Ireland) (`eu-west-1`) Region. | September 5, 2018 | 
| [Amazon EKS platform version update](https://docs.aws.amazon.com/eks/latest/userguide/platform-versions.html) | New platform version with support for Kubernetes [aggregation layer](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) and the [Horizontal Pod Autoscaler](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/)(HPA). | August 31, 2018 | 
| [New Amazon EKS optimized AMIs and GPU support](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to use a new AWS CloudFormation node template and [bootstrap script](https://github.com/awslabs/amazon-eks-ami/blob/main/templates/al2/runtime/bootstrap.sh). In addition, a new [Amazon EKS optimized AMI with GPU support](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html#gpu-ami) is available. | August 22, 2018 | 
| [New Amazon EKS optimized AMI patched for `ALAS2-2018-1058`](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has updated the Amazon EKS optimized AMI to address the CVEs that are referenced in [ALAS2-2018-1058](https://alas.aws.amazon.com/AL2/ALAS-2018-1058.html). | August 14, 2018 | 
| [Amazon EKS optimized AMI build scripts](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) | Amazon EKS has open-sourced the build scripts that are used to build the Amazon EKS optimized AMI. These build scripts are now available on GitHub. | July 10, 2018 | 
| [Amazon EKS initial release](#doc-history) | Initial documentation for service launch | June 5, 2018 |