
Amazon VPC CNI Plugin now supports Kubernetes NetworkPolicy enforcement, allowing customers to secure pod-to-pod traffic using label selectors, namespaces, and IP blocks without requiring additional third-party software.


<div><p>This article announces that Amazon VPC CNI Plugin now supports Kubernetes NetworkPolicy resource, enabling native network policy enforcement without additional software.</p><ul><li>NetworkPolicy support allows pod traffic control based on labels, namespaces, IP blocks, and ports</li><li>Eliminates need for third-party plugins, reducing operational overhead and costs</li><li>Integrates with VPC security groups and network ACLs for defense-in-depth security</li><li>Enables policy tracing and troubleshooting at cluster and node levels</li><li>Available in VPC CNI v1.14 for Kubernetes 1.25+ clusters, disabled by default</li></ul><p>Amazon VPC CNI now provides built-in NetworkPolicy enforcement, simplifying Kubernetes network security on AWS without additional software dependencies.</p></div>


Related articles