AWS · Amazon EKS · Diagram as code
AWS EKS architecture diagram
Show a managed Kubernetes cluster on EKS inside your VPC, fronted by an ALB and backed by data stores. ArchLex checks containment and relationship endpoints for eks.
ALB exposing EKS in a VPC.
Public ALB, private EKS cluster, and RDS in its own subnet.
provider aws
direction LR
validation normal
account prod {
region us-east-1 {
vpc main {
subnet public {
lb: alb["ALB"]
}
subnet private-app {
k8s: eks["EKS cluster"]
}
subnet private-db {
db: rds["PostgreSQL"]
}
}
}
}
lb -[exposes]-> k8s
k8s -[reads]-> dbMinimal ALB to EKS.
A compact diagram when you do not need every subnet drawn.
provider aws
direction LR
lb: alb["ALB"]
k8s: eks["EKS cluster"]
lb -[exposes]-> k8sPattern notes for Amazon EKS.
Placement and relationship rules ArchLex enforces for this service.
- Placement. Put eks inside a subnet under a VPC when you are drawing networked architecture. Keep the ALB in a public subnet and the cluster in private-app.
- Valid connections. alb -[exposes]-> eks (routes does not list eks as a target), eks -[reads]-> rds|dynamodb|s3|elasticache|secrets-manager, and eks -[attaches]-> efs. Prefer exposes over routes for ALB to EKS.
- Cluster internals. For Deployments, Services and Ingresses inside the cluster, switch to the Kubernetes provider (or mix k8s.* qualified kinds). This page focuses on the EKS control-plane resource in an AWS diagram.
Ask an agent to draw it.
Install the ArchLex skill or connect the free MCP server, then paste this prompt.
npx skills add baires/archlexDraw an Amazon EKS architecture diagram with an ALB in a public subnet exposing an EKS cluster in a private subnet that reads RDS. Validate it and give me a playground link.Prefer MCP? Follow the MCP server guide.
Related AWS examples.
Amazon EKS diagram questions.
How do I connect an ALB to EKS in ArchLex?
Use alb -[exposes]-> eks. The routes relationship does not list eks as an allowed target, so exposes is the valid edge.
Can I mix EKS with Kubernetes Deployments in one diagram?
Yes. Register both providers and use qualified kinds such as aws.eks next to k8s.deployment, or keep AWS edge/data plane on aws and workloads on k8s.
Does ArchLex read my EKS cluster?
No. It validates the diagram source only. It does not import manifests, RBAC, or cluster state.
Where do I diagram Ingress and Deployments?
Use the Kubernetes Ingress architecture diagram page for in-cluster routing, or open a Kubernetes example from the gallery.
More AWS service diagrams.
Open source · MIT licensed