Falco is now available as an Amazon EKS add-on

This document announces Falco’s availability as an AWS-validated Amazon EKS add-on and explains how it simplifies runtime security deployment for Kubernetes by offering single-command installation, native AWS integrations (CloudWatch, CloudTrail, IRSA), and managed lifecycle updates. It outlines installation via AWS CLI/eksctl/Console, describes Falco’s rule-based detection model, shows how to customize rules with ConfigMaps and DaemonSet patches, and provides steps to view events, troubleshoot, and stay updated on versions—enabling consistent, scalable runtime threat detection across EKS clusters.