--- title: "Implementing zero-trust workload security on Amazon EKS with Calico" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/implementing-zero-trust-workload-security-on-amazon-eks-with-calico/" --- [Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/) # Implementing zero-trust workload security on Amazon EKS with Calico By [Suki Lam](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/suki-lam/) on Sep 06, 2022 • 3 min read Whether you’re migrating to the cloud via lift-and-shift deployments, or re-architecting to a [cloud-native architecture](https://link.tigera.io/ueUTr), the migration itself and adopting a microservices architecture is no easy feat. To accelerate their cloud-native journey, many organizations opt for a managed Kubernetes service, as the skill and resources required to run a container orchestration system at scale are demanding. Amazon Elastic Kubernetes Service (EKS) is one of the most popular managed Kubernetes services for organizations running containerized applications in cloud. In a new joint blog post with the AWS Partner Network, AWS Solutions Architect, Andrew Park, and Tigera’s Director of Solution and Partner Marketing, Dhiraj Sehgal, guides users through the journey of implementing zero-trust workload access controls and identity-aware [microsegmentation](https://link.tigera.io/ueMDg) for multi-tenant workloads in Amazon EKS. Learn how you can combine Calico Cloud and Amazon EKS to generate compliance reports and meet regulatory compliance requirements. ## Blog highlights Besides providing a detailed walkthrough on how you can enforce zero-trust workload access and microsegmentation for your EKS workloads, this blog is also written with Tigera’s AWS DevDays workshop in mind—meaning applicable examples and scenarios are included so you can follow along. Key highlights: - Enabling secure connections to external services outside of the cluster - The importance of zero-trust workload access controls and microsegmentation - Demo application with Online Boutique (previously known as Hipster Shop) - Zero-trust workload access controls scenarios for RecommendationService - Microsegmentation exercise using ProductCatalogService and RedisCart ## Why read the blog? First, cloud-native workloads are ephemeral, distributed, and dynamic—often without a fixed network address. As a result, conventional methods that rely on fixed network addresses cannot specify granular access controls at the workload level for Kubernetes and containers. Without granular, zero-trust workload-level access controls, containers can be exploited by vulnerabilities and bad actors. Second, microsegmentation is used to control communication between microservices running in the cluster. Traditional security tools deployed at the network edge (primarily the firewall) can only screen north-south traffic between the network and external traffic sources and are unable to secure east-west traffic and traffic within data centers and distributed systems. Identity-aware microsegmentation creates secure “islands” within a distributed infrastructure, allowing administrators to control user-to-workload and workload-to-workload access from various locations. [Zero trust](https://link.tigera.io/ueWwr) security strategies success would not be possible without addressing these key areas. There’s no better way to learn something than to apply it and see it in action—and this workshop-based blog is the perfect way to get started. ***[Read the blog now](https://aws.amazon.com/blogs/apn/implementing-zero-trust-workload-security-on-amazon-eks-with-calico/) to start leveraging Calico Cloud and Amazon EKS together.*** [Partner/Integration](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/partner-integration/)[Announcements](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/announcements/) Add Tigera as a preferred source on Google to see more of our content in your search results. [![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io) ## Related posts [![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) #### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 25, 2026 The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) #### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 17, 2026 Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) [![Introducing the New Tigera & Calico Brand](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/New-logo-blog-1200x628-1.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/) #### [Introducing the New Tigera & Calico Brand](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Jan 30, 2026 Same community. A clearer, more unified look. Today, we are excited to share a refresh of the Tigera and Calico visual identity! This update better reflects who we are, who we serve, and where we... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/)