> For the complete documentation index, see [llms.txt](https://mamawhocode.gitbook.io/aws/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mamawhocode.gitbook.io/aws/services/container/eks.md).

# EKS

Elastic Kubernetes Service: use Kubernete on AWS

[Console](https://ap-northeast-1.console.aws.amazon.com/eks/home?region=ap-northeast-1#) | [Documents ](https://docs.aws.amazon.com/eks/)|

## Overview

* Alternative of ECS, similar goal but different API.
* Kubernetes is *<mark style="color:red;">open-source</mark>* system for automatic deployment, scaling and management.

### How it works

<figure><img src="https://2259236002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fuh9xZDZ53qGqmMCM44PU%2Fuploads%2FpjhKdMy0f9ywhx5DMoFi%2Fimage.png?alt=media&amp;token=80c892f1-4fd9-4102-ac55-516181532e70" alt=""><figcaption><p>How it works</p></figcaption></figure>

### Use cases

* Already using Kubernetes on-premises or in another cloud.

### Node types

* Managed node group
* Self-managed nodes

## Data volumes

* EBS
* EFS (work with Fargate)
* FSx for Lustre
* FSx for NetApp ONTAP.

## Security

* Turn on secretes encryption (using KMS) to encrypt Kubernetes secrets.
* The KMS key will be created in the *<mark style="background-color:yellow;">**same region**</mark>* as your cluster (of course).
* Cannot modify or remove encryption once enabled.