slowbro/recommend-best-practice icon
public
Published on 3/11/2025
Recommend Infrastructure Security & Best Practices

Prompts
Recommend Infrastructure Security & Best Practices
Recommend secure practices for AWS infrastructure managed by Terraform and Kubernetes
Outline the essential security practices and configurations to secure AWS infrastructure deployed using Terraform and Kubernetes. Provide specific recommendations for:

AWS Security:
- IAM least privilege policies and role management
- VPC isolation, security groups, and NACLs
- Secure data storage (S3 encryption, lifecycle policies, backups)
- Monitoring with CloudWatch and auditing with CloudTrail

Kubernetes Security:
- Secure EKS cluster setup (networking, control plane, managed node groups)
- Secure container image management and scanning strategies
- Kubernetes RBAC roles and namespaces best practices
- Handling Kubernetes secrets securely (Vault, Sealed Secrets, External Secrets)

Documentation:
- Provide actionable guidance for security compliance
- Include best practice checklists for auditing infrastructure security

The user has provided the following infrastructure context: