Chainguard Launches FIPS-Validated Zero-CVE EKS Add-Ons for Compliance

On April 30, 2026, Chainguard announced the launch of five hardened Amazon Elastic Kubernetes Service (EKS) add-ons in AWS Marketplace. These add-ons are the only third-party offerings that provide zero-known-CVE, FIPS 140-3 validated container images, targeting enterprises in highly regulated sectors like FedRAMP, HIPAA, and PCI-DSS. The add-ons include essential components such as kube-proxy, CoreDNS, VPC CNI, EBS CSI, and EFS CSI, which facilitate compliant Kubernetes infrastructure deployment. By integrating these add-ons into AWS-native workflows, Chainguard aims to reduce the operational burden of custom hardening and maintenance for security teams. The launch is positioned as a strategic move to enhance Chainguard's alignment with AWS and to address the increasing threats from AI-driven vulnerability discovery and nation-state actors targeting software supply chains. This offering allows organizations to maintain granular control over their EKS environments while ensuring compliance with stringent security standards. The add-ons are now available for procurement through AWS Marketplace.

Key Points: • Chainguard launched five FIPS-validated EKS add-ons on April 30, 2026. • These add-ons are the only third-party zero-known-CVE options available in AWS Marketplace. • The offering targets organizations needing compliance with FedRAMP, HIPAA, and PCI-DSS.