AWS EKS/AWS Inspector and Package Vulnerability
0
Hi,
If I have an EKS managed node group with EC2 instances and some package vulnerabilities. What is the best approach to fix the issues with Package Vulnerabilities? And second question, if I update EKS cluster the EC2 instances are update as well, should I then again fix the package vulnerabilities?
Thank you, M
Tag
Lingua
English
posta un anno fa606 visualizzazioni
1 Risposta
- Più recenti
- Maggior numero di voti
- Maggior numero di commenti
0
The vulnerabilities can be fixed by upgrading the nodes to the latest or specific aws-eks-ami version which fixes the mentioned CVE ID. There could be some false positives as well that even after upgrading the vulnerabilities still persists which can be acknowledged or ignored.
con risposta un anno fa
Contenuto pertinente
AWS UFFICIALEAggiornata un anno fa- AWS UFFICIALEAggiornata 4 mesi fa
You mean it's AWS responsibility to fix package vulnerabilities when I update EKS manage node group version?