Sold by: ControlPlane
An exec‑ready, architecture‑anchored threat modelling engagement that evaluates Kubernetes and EKS security posture across clusters, delivering mapped threats, trust boundaries, and prioritised technical recommendations to harden environments, and guide security roadmaps.
Overview
A structured, architecture-anchored, exec-ready, and in-depth threat modelling engagement designed to evaluate the security posture of an organisation’s Kubernetes environments across single or multi-cluster deployments. The assessment systematically analyses EKS cluster security controls, architecture diagrams, networking and firewalling, RBAC, workload security, namespace isolation, CI/CD interactions, and supporting infrastructure. Ideal for organisations looking to complement internal teams with specialised expertise to gain a comprehensive, context-specific understanding of EKS-specific threats, mapped attack surfaces, trust boundaries, and architectural risks, and to receive clear, prioritised security control recommendations that harden clusters, improve resilience, and inform security roadmaps, incident response playbooks, and governance frameworks.
Highlights
- A full system-level threat model diagram with layered decomposition across cluster and fleet levels.
- A threat catalogue with risk-impact matrix tailored to Kubernetes workloads and architecture. Annotated attack trees and architectural risk traces across control planes, namespaces, workloads, and ingress/egress.
- Security control recommendations mapped to Kubernetes lifecycle phases, aligned with best practices and standards (e.g., CIS Benchmarks, NSA Kubernetes Hardening Guide).
Details
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Support
Vendor support
This is a fixed-scope consulting engagement and does not include ongoing support beyond the final deliverables. For engagement-related queries during delivery, please contact us at contact@control-plane.io .