Multiple EKS audit logs files


I have enabled EKS audit logs, in cloud logs there are two files getting generated for audit logs alone, each getting written with logs in parallel. Why there are two files generated, is there any difference between them.

1 Answer

Two log streams are created in parallel when you enabled Amazon EKS audit logs. They are named similar to: kube-apiserver-audit-<random-string>. There are two because Amazon EKS runs two API servers for each EKS cluster to maintain availability zone level redundancy.

"EKS runs a minimum of two API server nodes in distinct Availability Zones (AZs) within in AWS region." Source:

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions