Amazon's suggested Cloudformation template for EKS VPC setup directly contradicts its recommendations. Does another template exist?

Question

In the article Getting Started with Amazon EKS, it recommends creating a VPC for the cluster using this provided cloudformation template. That template creates a VPC with three public subnets and 0 private subnets.

In the article Cluster VPC Considerations it says

We recommend a network architecture that uses private subnets for your worker nodes and public subnets for Kubernetes to create internet-facing load balancers within

Does a cloudformation template exist anywhere that is actually in line with their own recommendations?

Answer 1

The Cluster VPC Considerations document is only to provide recommendation and guidelines and the real architecture implementation depends on your requirements. If you are looking into creating a private and public subnet on a VPC, there is a sample of cloudformation template : Sample template that you can use to help you to get started writing your own template.

EKS cluster can be created on an existing VPC either using existing subnets or new subnets as long as it fulfils the requirements listed on the VPC consideration : Cluster VPC Considerations , such as tagging for internal load balancer, VPC DNS hostname and DNS resolution support. When creating an EKS cluster, you can pick any VPC and subnets (within the VPC) in the region : Getting Started with Amazon EKS - Step 1: Create Your Amazon EKS Cluster and it doesn’t have to be the one created by cloudformation.