Amazon EKS now supports customer-routed control plane egress

Summary

• Adds customer‑routed control‑plane egress, letting API server traffic flow through your VPC
• Provides routing, security‑group, and egress path control for webhook, OIDC, and aggregate API requests, supporting private endpoints and compliance requirements
• Configurable via controlPlaneEgressMode=CUSTOMER_ROUTED and enforceable with eks:controlPlaneEgressMode IAM condition; available at no extra cost