---
title: "Automate Calico Cloud and EKS cluster integration using AWS Control Tower"
source: "https://www.tigera.io/blog/automate-tigera-calico-cloud-and-eks-clusters-integration-using-aws-control-tower/"
---

[Technical Blog](https://www.tigera.io/category/technical-blog/)

# Automate Calico Cloud and EKS cluster integration using AWS Control Tower

By [Suki Lam](https://www.tigera.io/blog/author/suki-lam/) on Oct 04, 2022 • 2 min read

Productive, scalable, and cost-effective, cloud infrastructure empowers innovation and faster deliverables. It’s a no-brainer why organizations are migrating to the cloud and containerizing their applications. As businesses scale their cloud infrastructure, they cannot be bottlenecked by security concerns. One way to release these bottlenecks and free up resources is by using automation.

What if you could automate the deployment and integration of your [container security](https://link.tigera.io/ueMex) services with your cluster’s environment?

In a joint blog post with AWS Marketplace, AWS Sr. Cloud Application Architect, Deepak Sihag, joins Tigera’s Technical Marketing Engineer, Joseph Yostos, to walk you through the process of activating, deploying, and configuring [Calico Cloud in your AWS Control Tower environment](https://www.tigera.io/news/tigera-delivers-instant-security-and-observability-to-amazon-elastic-kubernetes-service-clusters/). And of course, how to automate the process of connecting Calico Cloud to your EKS cluster.

## Blog highlights

Aside from showing you how you can fully leverage the preconfigured resources of AWS Control Tower, the solution walkthrough also highlights:

- Event-driven automation to connect an EKS cluster with Calico Cloud

- AWS CloudFormation deployment

- Detailed runthrough of prerequisite configurations

- Step-by-step guide on how to automate Calico Cloud and EKS cluster integration using AWS Control Tower

- How to clean up your account to avoid incurring costs

## Why read the blog?

As the industry’s only active Cloud-Native Application Protection Platform (CNAPP), Calico Cloud is built to address ever-evolving security challenges, offering active, [cloud-native security](https://link.tigera.io/ue2di) tools such as global policy management, full-stack observability, and risk mediation for multi-cloud and hybrid deployments.

Aside from implementing [EKS security](https://link.tigera.io/ueVWI) best practices, a multi-account strategy is also recommended for efficient isolation of resources while also providing an extra layer of security. As one of the most popular managed Kubernetes services, Amazon EKS’s AWS Control Tower enables customers to manage and control multi-account AWS environments with ease.

But the convenience doesn’t end there. By using the AWS Control Tower to automate the process of connecting Calico Cloud to your EKS cluster, all security and networking policies set up on your AWS account will automatically populate on Calico Cloud, so you can get started immediately. No additional setup required.

***[Read the blog](https://aws.amazon.com/blogs/awsmarketplace/automate-tigera-calico-cloud-eks-clusters-integration-aws-control-tower/) to learn how Calico Cloud and AWS work together.***

[Partner/Integration](https://www.tigera.io/tags/partner-integration/)[Products](https://www.tigera.io/tags/products/)[Announcements](https://www.tigera.io/tags/announcements/)

## Related posts

[![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

#### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/)
on Sep 3, 2026

A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale...

[Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

[![The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/app/uploads/2026/08/The-Safest-Place-to-Run-an-AI-Agent-Is-On-a-Cluster-That-Doesnt-Trust-It.png)](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

#### [The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/)
on Aug 27, 2026

Every organization running AI agents has already made a hosting decision. Most made it by accident. The sales team switched on the agent built into their CRM. Engineering is piloting a coding agent in a...

[Read more](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

[![AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/app/uploads/2026/08/AI-Red-Team-Agents-Automate-Attacks-on-your-AI-Agents.-Runtime-Policies-Automate-their-Defense.png)](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

#### [AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/)
on Aug 24, 2026

The AI red teaming market grew up fast this year. OpenAI bought Promptfoo, Cisco and Microsoft shipped automated attack suites, and a seed-stage startup publicly compromised 50 of 55 live customer service bots. These platforms...

[Read more](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=3176 metric#misses=41 metric#hit-ratio=98.7 metric#bytes=1513469 metric#prefetches=0 metric#store-reads=165 metric#store-writes=22 metric#store-hits=151 metric#store-misses=30 metric#sql-queries=38 metric#ms-total=935.15 metric#ms-cache=54.57 metric#ms-cache-avg=0.2934 metric#ms-cache-ratio=5.8 -->
