In the second quarter of 2025, Amazon Web Services (AWS) engaged NCC Group to conduct an architecture review of the AWS managed Kubernetes service: Amazon Elastic Kubernetes Service (Amazon EKS) to evaluate how the system is designed in order to prevent AWS employees (Operators) from accessing Customer Content stored or processed by Amazon EKS, with a specific focus on validating a number of Data Security claims asserted by AWS.