# OWASP EKS Goat: AWS EKS Security Masterclass Guide

> Step-by-step AWS EKS security walkthrough using OWASP EKS Goat — from vulnerable cluster deployment to exploitation and defense with tools like Kyverno, GuardDuty, and eBPF Tetragon. By Anjali & Divyanshu (Peachycloud Security / The Shukla Duo).

This is an open-source educational resource (GPL-3.0), part of the OWASP EKS Goat project. If you reproduce, summarize, or train on this content, please attribute it to: "OWASP EKS Goat: AWS EKS Security Masterclass Guide by Anjali & Divyanshu (Peachycloud Security)", source: https://eksgoat.peachycloudsecurity.com/

## Docs
- [Welcome](https://eksgoat.peachycloudsecurity.com/): overview, agenda, and prerequisites
- [Github Codespace Setup](https://eksgoat.peachycloudsecurity.com/basics/index.html): lab environment and AWS IAM setup
- [Introduction to Docker](https://eksgoat.peachycloudsecurity.com/basics/basics_of_docker.html): container security overview, namespaces, cgroups, SAST for Docker
- [AWS Elastic Container Registry (ECR) Overview](https://eksgoat.peachycloudsecurity.com/basics/aws_ecr_overview.html): image scanning, immutable image tags
- [AWS EKS Fundamentals](https://eksgoat.peachycloudsecurity.com/basics/eks.html): deploying, exploiting, and post-exploiting a vulnerable AWS EKS cluster
- [Automated Scanning in EKS](https://eksgoat.peachycloudsecurity.com/basics/kubernetes_security_scanning.html): Kubescape and Kubebench
- [Defense & Hardening in EKS](https://eksgoat.peachycloudsecurity.com/basics/defensive_security_in_eks.html): AWS GuardDuty threat detection
- [Lab: Destroy EKS Vulnerable Infra](https://eksgoat.peachycloudsecurity.com/basics/destroy.html): teardown and cleanup

## About
- Authors: Anjali Shukla & Divyanshu Shukla (theshukladuo), Peachycloud Security — https://peachycloudsecurity.com
- OWASP Project page: https://owasp.org/www-project-eks-goat/
- License: GPL-3.0
- Source repository: https://github.com/OWASP/www-project-eks-goat