Amazon EKS Adds Support for Bottlerocket FIPS AMIs in Managed Node Groups

Amazon Elastic Kubernetes Service (Amazon EKS) now offers Bottlerocket FIPS (Federal Information Processing Standards) AMIs for EKS managed node groups, helping customers to meet federal compliance requirements while leveraging the security of Bottlerocket and the operational benefits of EKS managed node groups.

Bottlerocket is a Linux-based operating system optimized for running containers that follows a minimal, immutable design for enhanced security and performance. The FIPS-enabled Bottlerocket AMIs for EKS include FIPS 140-3 validated cryptographic modules and are configured by default to use FIPS-enabled AWS service endpoints, making it easier for customers in regulated industries to run containerized workloads while maintaining compliance with federal standards.

This feature is available in the following AWS regions: US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), AWS GovCloud (US-East), AWS GovCloud (US-West). There are no additional charges for using Bottlerocket FIPS AMIs with EKS managed node groups beyond standard EKS and EC2 pricing.

To learn more, visit the Amazon EKS documentation for the Bottlerocket FIPS AMI.