Hey everyone! Been trying to deploy NanoClaw agents on AWS EKS and kept getting overwhelmed by all the security configs. So I built a Terraform module to handle it.

It sets up a private EKS cluster with locked-down IAM roles, node security groups that only allow necessary traffic, and the AWS EBS CSI driver with encryption enabled by default. Also auto-enables guard duty and container insights.

I'm still new to Kubernetes security policies though. Does this base setup seem okay for a NanoClaw deployment? Or am I missing something obvious for restricting the agents' permissions inside the pods themselves? Still figuring out PodSecurityAdmissions...

Here's the repo link if you want to check it out: [link removed for forum rules]. Would love any feedback!