81% of EKS clusters still run the auth method AWS deprecated
AWS deprecated aws-auth, the hand-edited ConfigMap that maps IAM identities to EKS permissions, in favor of a newer API-driven method. Yet a 2025 Kubernetes Security Report shows 81% of clusters still run the old one, against AWS's own guidance. That hard-to-audit wiring is the security illusion Kubernetes creates, and it's why roughly two-thirds of teams report K8s-related delays in shipping.