# Source: https://docs.datadoghq.com/security/default_rules/def-000-0r1.md

---
title: EKS Cluster Access Manager API should be enabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > EKS Cluster Access Manager API should
  be enabled
---

# EKS Cluster Access Manager API should be enabled
 
## Description{% #description %}

Amazon EKS recommends using the Cluster Access Manager API for managing EKS cluster access, replacing the `aws-auth` ConfigMap. This new API simplifies Role-Based Access Control (RBAC) and Service Account management by allowing direct control via the EKS API, reducing manual configuration and the risk of errors. It also enhances security by enabling the assignment of predefined AWS-managed Kubernetes permissions to IAM principals, offering improved visibility and auditing capabilities.

**Note**: EKS Cluster Access Manager API is only available in EKS version 1.23 and above. Clusters running earlier EKS versions will not be assessed by this control.

## Remediation{% #remediation %}

For guidance on configuring EKS cluster access, refer to the [Grant IAM users and roles access to Kubernetes APIs](https://docs.aws.amazon.com/eks/latest/userguide/grant-k8s-access.html) section of the Amazon EKS User Guide.