Help improve this page
Want to contribute to this user guide? Choose the Edit this page on GitHub link that is located in the right pane of every page. Your contributions will help make our user guide better for everyone.
Amazon Connector frequently asked questions
Q: How does the underlying technology behind the Amazon EKS Connector work?
A: The Amazon EKS Connector is based on the Amazon Systems Manager (Systems Manager) agent. The Amazon EKS Connector runs as a StatefulSet on your Kubernetes cluster. It establishes a connection and proxies the communication between the API server of your cluster and Amazon Web Services. It does this to display cluster data in the Amazon EKS console until you disconnect the cluster from Amazon. The Systems Manager agent is an open source project. For more information about this project, see the GitHub project page
Q: I have an on-premises Kubernetes cluster that I want to connect. Do I need to open firewall ports to connect it?
A: No, you don’t need to open any firewall ports. The Kubernetes cluster only requires outbound connection to Amazon Regions. Amazon services never access resources in your on-premises network. The Amazon EKS Connector runs on your cluster and initiates the connection to Amazon. When the cluster registration completes, Amazon only issues commands to the Amazon EKS Connector after you start an action from the Amazon EKS console that requires information from the Kubernetes API server on your cluster.
Q: What data is sent from my cluster to Amazon by the Amazon EKS Connector?
A: The Amazon EKS Connector sends technical information that’s necessary for your cluster to be registered on Amazon. It also sends cluster and workload metadata for the Amazon EKS console features that customers request. The Amazon EKS Connector only gathers or sends this data if you start an action from the Amazon EKS console or the Amazon EKS API that necessitates the data to be sent to Amazon. Other than the Kubernetes version number, Amazon doesn’t store any data by default. It stores data only if you authorize it to.
Q: Can I connect a cluster outside of an Amazon Region?
A: Yes, you can connect a cluster from any location to Amazon EKS. Moreover, your Amazon EKS service can be located in any Amazon public commercial Amazon Region. This works with a valid network connection from your cluster to the target Amazon Region. We recommend that you pick an Amazon Region that is closest to your cluster location for UI performance optimization. For example, if you have a cluster running in Tokyo, connect your cluster to the Amazon Region in Tokyo (that is, the ap-northeast-1
Amazon Region) for low latency. You can connect a cluster from any location to Amazon EKS in any of the public commercial Amazon Regions, except the China or GovCloud Amazon Regions.