---
title: "Attacking and Defending Amazon EKS [Cheat Sheet] - Cybr"
description: "Cheat sheet to learn about the top threats facing Amazon EKS (and Kubernetes in general) and how to learn them hands-on."
url: https://cybr.com/container-security/attacking-and-defending-amazon-eks-cheat-sheet/
---

# Attacking and Defending Amazon EKS \[Cheat Sheet\]

Our live presentation on Attacking & Defending Amazon EKS sparked interesting questions and conversations regarding the biggest threats to Amazon EKS (and Kubernetes in general). A…

Christophe

Published February 2, 2024

Our live presentation on [Attacking & Defending Amazon EKS](https://cybr.com/webinars/attacking-and-defending-amazon-eks/) sparked interesting questions and conversations regarding the biggest threats to Amazon EKS (and Kubernetes in general).

A great way to learn about Kubernetes security threats is to turn to resources from OWASP. Let’s take a look.

If you’re not already familiar with [OWASP](https://owasp.org/), they’re a nonprofit driven by volunteers, and they’ve been putting out fantastic free resources for years. Their most well known project is the “[OWASP Top 10](https://owasp.org/www-project-top-ten/)” which lists out the top 10 web application security risks…but not as well known is that they *also* have an [OWASP Top 10 for Kubernetes Risks](https://owasp.org/www-project-kubernetes-top-ten/).

The open source tool that [Georgi Vodenitcharov, CISSP](https://www.linkedin.com/in/ACoAACP4chABSJjNxySFg8sxGA_7b3IyBPVA8sY) demonstrated in our webinar called [Kubernetes Goat](https://github.com/madhuakula/kubernetes-goat) has learning scenarios that map directly to the top 10 list so that you can learn about the risks and impacts hands-on. You can even do this all for free, since you have the ability to run it locally instead of in the cloud if you want.

Check out our cheat sheet below to see what I mean, and if you’d like to try it out, refer to our live presentation and to the K8s Goat project.

More free resources to keep learning about this:
➡️ More cheat sheets like this: [https://cybr.com/tag/cheat-sheets/](https://cybr.com/tag/cheat-sheets/)
➡️ Webinars: [https://cybr.com/webinars](https://cybr.com/webinars)

♻️ If you know anyone running Kubernetes or learning about it, help share to make sure they see this! ♻️

[![Kubernetes Security Risks from OWASP Top 10 mapping to Kubernetes Goat learning labs scenarios](https://media.cybr.com/2024/01/owasp-top-10-k8s-mapping-858x1024.jpeg)](https://media.cybr.com/2024/01/owasp-top-10-k8s-mapping-scaled.jpeg)

## Filed under

- [Cloud Security](https://cybr.com/cloud-security/)
- [Container Security](https://cybr.com/container-security/)
- [Intermediate](https://cybr.com/intermediate-archives/)
- [AWS](https://cybr.com/tag/aws/)
- [AWS Security](https://cybr.com/tag/aws-security/)
- [AWS Security Cheat Sheets](https://cybr.com/tag/aws-security-cheat-sheets/)
- [Cheat Sheets](https://cybr.com/tag/cheat-sheets/)
- [Cloud Security](https://cybr.com/tag/cloud-security/)
- [Containers](https://cybr.com/tag/containers/)
- [Containers Security](https://cybr.com/tag/containers-security/)

## Comments

Loading comments…

Recommended resources

[![Explore the AWS Certified Security Specialty course](https://media.cybr.com/2023/12/cybr-aws-security-specialty-banner-768x432.jpg)](https://cybr.com/courses/aws-certified-security-specialty-course/)

## Build practical AWS security skills

Start with the core services, then prepare for the AWS Certified Security Specialty exam with guided lessons and hands-on practice.

[Introduction to AWS Security](https://cybr.com/courses/introduction-to-aws-security/) [Security Specialty course](https://cybr.com/courses/aws-certified-security-specialty-course/)