Teleport expands EKS support at KubeCon 2025

12 Nov 2025

At KubeCon + CloudNativeCon in Atlanta, Teleport has unveiled expanded support for Amazon Elastic Kubernetes Service (EKS) within its Identity Security offerings.

This integration enhances organisational visibility into EKS cluster activity, allowing teams to detect shadow access, privilege escalation, and identity-related risks in managed Kubernetes environments.

Introduction at KubeCon

Teleport's latest EKS integration, given at KubeCon, shows how engineering and security teams can merge

Teleport's latest EKS integration, presented at KubeCon, demonstrates how engineering and security teams can merge access intelligence for AWS and Kubernetes, fostering stronger Zero Trust frameworks.

The advanced integration extends the capabilities of Teleport's Access Graph and Investigate features by including EKS-specific audit logs. This advancement enables visualisation of Kubernetes cluster access and actions, even when access is obtained through AWS credentials instead of directly through Teleport.

Enhancing identity security for EKS

“Organisations utilising Amazon EKS have found it challenging to achieve a consistent view of access activities across their cloud and Kubernetes layers,” expressed Ben Arent, Director of Product for Teleport.

By consolidating Amazon EKS audit information into Teleport Identity Security's Identity Activity Centre, hidden identity risks, such as shadow user access and misuse of service accounts, can be addressed before they lead to security incidents.

Integrating identity context from AWS IAM

Traditional Kubernetes security tools have typically been limited to enforcing access policies

Traditional Kubernetes security tools have typically been limited to implementing access policies and have lacked comprehensive insight into cluster usage.

Teleport’s Amazon EKS Audit Log Integration, sourcing telemetry from AWS CloudWatch and enhancing it with identity context from AWS Identity and Access Management (IAM), offers an all-encompassing view. This approach allows teams to consistently link user identities to actions within EKS environments.

Advantages for platform and security teams

With EKS Identity Security, teams are enabled to:

Visualise cluster access paths using the Teleport Access Graph
Investigate activities across AWS, Teleport Zero-Trust Access, and Amazon EKS from a single interface
Identify shadow access and identity-based anomalies in real-time
Confirm enforcement of access control for compliance and audit purposes

The integration promises to simplify compliance tasks, enhance security posture, and facilitate collaboration between platform engineering and security operations teams.

Future availability

The enhancements to Amazon EKS Identity Security are scheduled to be available for on-premises Teleport deployments in November 2025.

Support for Teleport Cloud is anticipated in the fourth quarter as part of a minor version update to Teleport 18.

Show full press release

KubeCon + CloudNativeCon in Atlanta, Teleport, the pioneer in Infrastructure Identity, announced expanded support for Amazon Elastic Kubernetes Service (EKS) within its Identity Security product. The new integration provides organisations with unprecedented visibility into Amazon EKS cluster activity, enabling teams to identify shadow access, privilege escalation, and identity-based risks across their managed Kubernetes environments.

Teleport’s enhanced EKS support debuts at KubeCon, where the company will showcase how engineering and security teams can unify access intelligence across AWS and Kubernetes to strengthen Zero Trust architectures.

Bringing identity-aware security to Amazon EKS

The new Amazon EKS integration extends Teleport’s Access Graph and Investigate capabilities to include EKS-specific audit logs, enabling users to visualise who has access to Kubernetes clusters and what actions are being taken, even when access occurs through AWS credentials rather than through Teleport directly.

“Organisations running Amazon EKS have struggled to gain a unified view of access activity across their cloud and Kubernetes layers,” said Ben Arent, Director of Product for Teleport. “By consolidating Amazon EKS audit data into Teleport Identity Security - Identity Activity Centre, we help customers expose and eliminate hidden identity risks — from shadow user access to users abusing service accounts — before they become incidents.”

Identity context from AWS IAM

Until now, traditional Kubernetes security tools have focused on enforcing access policies without full visibility into how clusters are being used. While audit trails and session recordings provided some coverage, they couldn’t expose alternative access pathways or unaudited activity in complex cloud environments.

Teleport’s new Amazon EKS Audit Log Integration pulls telemetry from AWS CloudWatch, enriching it with identity context from AWS Identity and Access Management (IAM) and enterprise identity providers. This holistic view lets teams correlate user identities across systems, ensuring that every action in an EKS environment can be tied back to a verified individual.

Benefits for platform and security teams

With EKS Identity Security, teams can now:

Visualize cluster access paths through the Teleport Access Graph
Investigate activity across AWS, Teleport Zero-Trust Access and Amazon EKS in a single unified view
Detect shadow access and identity-based anomalies in real time
Prove access control enforcement for compliance and audit readiness

The result is simplified compliance, stronger security posture, and improved collaboration between platform engineering and security operations teams.

Availability

The Amazon EKS Identity Security enhancements will be available for on-premises Teleport deployments in November 2025, with Teleport Cloud support following in Q4 as part of minor version update to Teleport 18.

Download PDF version Download PDF version

Add as a preferred source on Google