How do I set up provenance and attestations for AWS EKS?

            // Example setup of provenance and attestations in AWS EKS

            // Step 1: Create a new EKS cluster
            eksctl create cluster --name my-cluster --region us-west-2 --nodegroup-name my-nodes --nodes 3 --managed

            // Step 2: Enable image scanning & provenance tracking
            kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/kibana/master/deploy/kibana-deployment.yaml

            // Step 3: Use AWS Nitro Enclaves for secure attestations
            aws nitro-cli build-enclave --docker-uri my-docker-image:latest --output-image enclave-image

            // Step 4: Deploy the attestation workload
            kubectl apply -f attestation-workload.yaml
            
            // Step 5: Verify the provenance of your images
            eksctl utils describe-nodegroup --cluster my-cluster --name my-nodes --region us-west-2