EKS & Windows Security Help

I am investigating a series of Kubernetes issues inside my AWS EKS cluster while, in parallel, tightening overall protection for our Windows environment. At the EKS level I need clear, actionable troubleshooting that pinpoints why certain pods occasionally lose connectivity and how that behaviour cascades through the wider network. Packet-flow analysis, security-group review and any recommended Calico or CNI tweaks are all on the table; the end goal is a concise set of steps I can reproduce to keep the cluster healthy and resilient.

On the workstation side my priority is “Sécurisation de postes de travail Windows et de réseau informatique”. The focus rests on our standard desktops and laptops (no Windows servers in scope right now). I want a straightforward hardening checklist that covers the essentials—baseline GPOs, endpoint protection settings, encrypt-in-transit guidance, and a short validation script so I can confirm everything is in place once the fixes are rolled out.

Deliverables
• A brief diagnostic report explaining root causes and remedies for the EKS pod connectivity problem.
• A step-by-step implementation guide (commands, YAML, screenshots if useful) to apply the recommended cluster-side fixes.
• A Windows desktop + laptop hardening sheet with verification steps and any PowerShell scripts used.

I’ll test each item against my staging environment; once all points pass those checks the project is complete.