Covers EKS cluster setup, IAM, VPC, node groups, Fargate, ALB ingress, CloudWatch & AWS security best practices