You can now control access to the Kubernetes API server endpoint managed by Amazon Elastic Container Service for Kubernetes (EKS), so that traffic between Kubernetes worker nodes, the Kubectl command line tool, and the EKS-managed Kubernetes API server stays within your Amazon Virtual Private Cloud (VPC). This allows you to isolate the Kubernetes control plane and worker nodes within your VPC, providing an additional layer of protection to harden clusters against malicious attack and accidental exposure.