1. Cluster Should Have Limited Service Account Access

More Info:

Ensures Kubernetes clusters are created with limited service account access scopes. Kubernetes service accounts should be limited in scope to the services necessary to operate the clusters.

Risk Level

High

Address

Security

Compliance Standards

PCIDSS, APRA, MAS

Additional Reading: