81% of EKS Clusters Still Use Deprecated AWS-Auth Method Despite Security Risks

Deprecated EKS Authentication Method Persists

Amazon EKS has deprecated the `aws-auth` ConfigMap, a manual and difficult-to-audit method for mapping IAM identities to cluster permissions. AWS now recommends an API-driven alternative for improved security and manageability.

Widespread Non-Compliance with Security Guidance

Despite AWS's security guidance, a 2025 Kubernetes Security Report reveals that 81% of EKS clusters are still operating with the older `aws-auth` ConfigMap. This indicates a significant gap between recommended security practices and current implementation across many organizations.

Impact on Kubernetes Security and Deployments

The continued use of the deprecated authentication method contributes to security vulnerabilities within Kubernetes environments. This oversight, among other security concerns, has led to approximately two-thirds of organizations delaying or slowing down their deployments due to Kubernetes-related security issues.

Broader Kubernetes Security Challenges

The issue with access control reflects a larger trend in Kubernetes security, where assumptions about built-in security often clash with the operational complexity of the platform. Securing Kubernetes requires attention across multiple layers, including Code, Container, Cluster, and Cloud, as weaknesses in one layer can cascade and compromise others.