Skill: krishnakumarmahadevan-cmd/toolweb-amazon-eks-hardening (version 1.0.0)

--- name: Amazon EKS Security Hardening Tool description: Professional Amazon EKS security configuration generator based on CIS Benchmarks for automated Kubernetes cluster hardening. --- # Overview The Amazon EKS Security Hardening Tool is a professional-grade security configuration generator designed for DevOps and security engineers deploying Amazon Elastic Kubernetes Service (EKS) clusters. Built on industry-standard CIS Benchmarks, this tool automates the generation of hardened security configurations, reducing manual configuration errors and ensuring compliance with security best practices. The tool provides intelligent configuration generation based on your specific security requirements and deployment context. It supports multiple hardening strategies aligned with CIS Kubernetes Benchmarks, enabling teams to implement defense-in-depth security postures without extensive manual tuning. The generated configurations can be directly applied to EKS clusters, significantly accelerating secure deployment workflows. Ideal users include AWS DevOps teams, Kubernetes security architects, cloud infrastructure engineers, and organizations subject to compliance frameworks such as CIS, SOC 2, or industry-specific security standards. The tool is particularly valuable for enterprises standardizing EKS deployments across multiple clusters and teams. # Usage ## Sample Request ```json { "sessionId": "sess_3f8k2j9lm0q1r2s3", "userId": 12345, "timestamp": "2024-01-15T14:30:00Z", "hardeningOptions": { "rbac": ["enable_strict_policies", "enforce_service_accounts"], "network_policies": ["default_deny_ingress", "default_deny_egress"], "audit_logging": ["enable_audit_logs", "log_authentication_events"], "pod_security": ["enforce_pod_security_standards", "disable_privileged_containers"], "encryption": ["enable_etcd_encryption", "enable_secrets_encryption"] } } ``` ## Sample Response ```json { "status": "success", "sessionId": "sess_3f8k2j9lm0q1r2s3", "generated_configs": { "rbac": { "cluster_role_binding": "apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: restrict-system-access\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: view\nsubjects:\n- kind: ServiceAccount\n name: default\n namespace: default", "network_policies": "apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n name: default-deny-all\n namespace: default\nspec:\n podSelector: {}\n policyTypes:\n - Ingress\n - Egress" }, "audit_logging": { "audit_policy": "apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: RequestResponse\n omitStages:\n - RequestReceived\n resources:\n - group: \"\"\n resources:\n - secrets" }, "pod_security": { "pod_security_standards": "apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n name: restricted\nspec:\n privileged: false\n allowPrivilegeEscalation: false\n requiredDropCapabilities:\n - ALL" } }, "deployment_guide": "Apply configurations in the following order: 1. RBAC policies 2. Network policies 3. Audit logging 4. Pod security standards 5. Encryption settings", "recommendations": [ "Enable CloudTrail logging for EKS API audit events", "Implement AWS Security Hub for continuous compliance monitoring", "Use AWS KMS for encryption key management", "Configure VPC security groups to restrict cluster access" ], "timestamp": "2024-01-15T14:30:15Z" } ``` # Endpoints ## GET / **Health Check Endpoint** Returns the service health status. **Parameters:** None **Response:** ``` Content-Type: application/json Status: 200 OK Body: {} (empty JSON object) ``` --- ## POST /api/eks/hardening/generate **Generate Amazon EKS Security Hardening Configuration** Generates customized Amazon EKS security hardening configuration files based on specified hardening options and CIS Benchmark standards. **Parameters:** | Name | Type | Required | Description | |------|------|----------|-------------| | `hardeningOptions` | object (string arrays) | Yes | Dictionary mapping hardening categories to configuration options. Each key represents a security domain (e.g., "rbac", "network_policies") and values are arrays of specific hardening measures to apply. | | `sessionId` | string | Yes | Unique session identifier for tracking and audit purposes. | | `userId` | integer or null | No | Identifier of the user requesting the configuration. Optional for anonymous requests. | | `timestamp` | string | Yes | ISO 8601 formatted timestamp indicating when the request was initiated. | **Response (200 OK):** ```json { "status": "success", "sessionId": "string", "generated_configs": { "[category]": { "[config_name]": "string (YAML/manifest content)" } }, "deployment_guide": "string", "recommendations": ["string"] } ``` **Error Response (422 Unprocessable Entity):** ```json { "detail": [ { "loc": ["body", "hardeningOptions"], "msg": "field required", "type": "value_error.missing" } ] } ``` --- ## GET /api/eks/hardening/options **Retrieve Available EKS Hardening Options** Returns a comprehensive list of all available hardening options and configuration choices supported by the tool. **Parameters:** None **Response (200 OK):** ```json { "hardening_categories": { "rbac": [ "enable_strict_policies", "enforce_service_accounts", "restrict_default_sa", "implement_least_privilege" ], "network_policies": [ "default_deny_ingress", "default_deny_egress", "whitelist_trusted_namespaces", "enable_calico_network_policies" ], "audit_logging": [ "enable_audit_logs", "log_authentication_events", "log_authorization_decisions", "log_sensitive_data_access" ], "pod_security": [ "enforce_pod_security_standards", "disable_privileged_containers", "enforce_read_only_rootfs", "restrict_host_access" ], "encryption": [ "enable_etcd_encryption", "enable_secrets_encryption", "use_aws_kms_keys", "rotate_encryption_keys" ], "image_security": [ "enforce_image_registry_policies", "enable_image_scanning", "require_signed_images", "block_untrusted_registries" ] }, "cis_benchmark_version": "1.7.0", "last_updated": "2024-01-15T00:00:00Z" } ``` # Pricing | Plan | Calls/Day | Calls/Month | Price | |------|-----------|-------------|-------| | Free | 5 | 50 | Free | | Developer | 20 | 500 | $39/mo | | Professional | 200 | 5,000 | $99/mo | | Enterprise | 100,000 | 1,000,000 | $299/mo | # About ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube. - [toolweb.in](https://toolweb.in) - [portal.toolweb.in](https://portal.toolweb.in) - [hub.toolweb.in](https://hub.toolweb.in) - [toolweb.in/openclaw/](https://toolweb.in/openclaw/) - [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477) - [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009) # References - Kong Route: https://api.mkkpro.com/hardening/amazon-eks - API Docs: https://api.mkkpro.com:8150/docs

path: openapi.json
content: {
  "openapi": "3.1.0",
  "info": {
    "title": "Amazon EKS Security Hardening Tool",
    "description": "Professional Amazon EKS Security Configuration Generator based on CIS Benchmarks",
    "version": "1.0.0"
  },
  "paths": {
    "/": {
      "get": {
        "summary": "Root",
        "description": "Health check endpoint",
        "operationId": "root__get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    },
    "/api/eks/hardening/generate": {
      "post": {
        "summary": "Generate Eks Hardening Config",
        "description": "Generate Amazon EKS security hardening configuration files",
        "operationId": "generate_eks_hardening_config_api_eks_hardening_generate_post",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/HardeningRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          },
          "422": {
            "description": "Validation Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/HTTPValidationError"
                }
              }
            }
          }
        }
      }
    },
    "/api/eks/hardening/options": {
      "get": {
        "summary": "Get Hardening Options",
        "description": "Get all available EKS hardening options",
        "operationId": "get_hardening_options_api_eks_hardening_options_get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "HTTPValidationError": {
        "properties": {
          "detail": {
            "items": {
              "$ref": "#/components/schemas/ValidationError"
            },
            "type": "array",
            "title": "Detail"
          }
        },
        "type": "object",
        "title": "HTTPValidationError"
      },
      "HardeningRequest": {
        "properties": {
          "hardeningOptions": {
            "additionalProperties": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "type": "object",
            "title": "Hardeningoptions"
          },
          "sessionId": {
            "type": "string",
            "title": "Sessionid"
          },
          "userId": {
            "anyOf": [
              {
                "type": "integer"
              },
              {
                "type": "null"
              }
            ],
            "title": "Userid"
          },
          "timestamp": {
            "type": "string",
            "title": "Timestamp"
          }
        },
        "type": "object",
        "required": [
          "hardeningOptions",
          "sessionId",
          "timestamp"
        ],
        "title": "HardeningRequest"
      },
      "ValidationError": {
        "properties": {
          "loc": {
            "items": {
              "anyOf": [
                {
                  "type": "string"
                },
                {
                  "type": "integer"
                }
              ]
            },
            "type": "array",
            "title": "Location"
          },
          "msg": {
            "type": "string",
            "title": "Message"
          },
          "type": {
            "type": "string",
            "title": "Error Type"
          }
        },
        "type": "object",
        "required": [
          "loc",
          "msg",
          "type"
        ],
        "title": "ValidationError"
      }
    }
  }
}

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)