EKS cluster resources should have the encryption_config block set with protection of the secrets resource.
EKS secrets could be read if compromised
Enable encryption of EKS secrets
The following example will fail the aws-eks-encrypt-secrets check.
The following example will pass the aws-eks-encrypt-secrets check.