In Chapter 3 , we deployed an EKS cluster with Terraform, focusing on the endpoint public access cluster and its security configurations. This chapter will extend the security discussion by concentrating on the endpoint private access cluster. We will show how to use IAM roles, rather than AWS access key ID and secret access key, for cluster creation, expanding on the IAM role advantages introduced earlier. Additionally, we will experiment with additional security groups and relocate the cluster ENIs to separate subnets, setting the stage for future discussions on IPv4 address management.