github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/eks/AVD-AWS-0039/docs.md (about) 1 2 EKS cluster resources should have the encryption_config block set with protection of the secrets resource. 3 4 ### Impact 5 EKS secrets could be read if compromised 6 7 <!-- DO NOT CHANGE --> 8 {{ remediationActions }} 9 10 ### Links 11 - https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-eks-adds-envelope-encryption-for-secrets-with-aws-kms/ 12 13