EKS
Last updated: Nov 3, 2026
Rationale
AWS EKS (Elastic Kubernetes Service) is the service that Fluid Attacks uses to host its Kubernetes Cluster in the cloud. With it, Fluid Attacks can fully manage the system with an IaaS approach.
These are the primary reasons why Fluid Attacks selected it and not other alternatives:
- It integrates easily with other AWS services. Thus, Fluid Attacks can easily integrate it with EC2 for automatic worker provisioning, with IAM for in-cluster authentication and authorization, and with Elastic Load Balancing to serve applications.
- Because all its infrastructure is in the cloud, its administration is much easier.
- It complies with many certifications from ISO and CSA. Many of these certifications make sure that the entity uses best practices for secure cloud-based environments and information security.
- Almost all the Kubernetes SIGs utilities support it.
- Fluid Attacks can fully manage clusters with Terraform.
- AWS updates it continuously to support new Kubernetes versions.
- It supports OIDC. Thus, the Kubernetes cluster of Fluid Attacks can do actions in AWS, for example, make load balancers automatically when Fluid Attacks deploys applications.
Alternatives
Some years ago, Fluid Attacks tested Google Kubernetes Engine (GKE). Google engineers made Kubernetes, and this is one of the primary reasons why the service of GCP is more complete. In general, its GUI gave much more information about nodes and pods. It also supported Terraform, it was easier to configure, and its support for new versions was faster. But Fluid Attacks did not select it and selected EKS for one reason: Fluid Attacks had to integrate it with other cloud solutions that were already on AWS. This is a clear example of cloud dependency.
Azure Kubernetes Service (AKS) is one more alternative. Its review is pending.
Usage
Fluid Attacks uses EKS for these tasks:
- To give networking infrastructure to its Kubernetes cluster
- To deploy worker groups automatically
- To connect to EC2 for automatic worker provisioning
- To connect to IAM for in-cluster authentication and authorization