TMAegis
ru

Каталог правил

Просматривайте все правила укрепления защиты в каталоге. Фильтруйте по платформе, критичности, уровню профиля и возможности автоматической проверки.

Найдено 29 правилиз 8 597Страница 1 из 2

IDНазваниеКритичность
TMA-GKE-AUTOPILOT-4.1.1Ensure the cluster-admin ClusterRole is only used when requiredgke-autopilot · Уровень 1Критический
TMA-GKE-AUTOPILOT-4.1.6Avoid granting cluster admin level access through the system:masters groupgke-autopilot · Уровень 1Критический
TMA-GKE-AUTOPILOT-4.1.8Avoid binding RBAC roles to unauthenticated users and groupsgke-autopilot · Уровень 2Критический
TMA-GKE-AUTOPILOT-4.1.2Ensure access to Secrets is minimized and granted only where requiredgke-autopilot · Уровень 1Высокий
TMA-GKE-AUTOPILOT-4.1.4Ensure that default service accounts are not actively usedgke-autopilot · Уровень 1Высокий
TMA-GKE-AUTOPILOT-4.1.5Ensure service account tokens are mounted only when Pods require Kubernetes API accessgke-autopilot · Уровень 1Высокий
TMA-GKE-AUTOPILOT-4.1.7Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes clustergke-autopilot · Уровень 1Высокий
TMA-GKE-AUTOPILOT-4.1.9Avoid binding RBAC roles to all authenticated usersgke-autopilot · Уровень 1Высокий
TMA-GKE-AUTOPILOT-5.3.1Enable application-layer Secrets encryption with Cloud KMS keysgke-autopilot · Уровень 2Высокий
TMA-GKE-AUTOPILOT-4.1.3Minimize wildcard use in Roles and ClusterRolesgke-autopilot · Уровень 1Средний
TMA-GKE-AUTOPILOT-4.3.1Use NetworkPolicy with built in GKE Dataplane V2 enforcementgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-4.4.1Use Secret Manager for external workload secret storagegke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-4.6.1Use namespaces to separate workload administration and resource governancegke-autopilot · Уровень 1Средний
TMA-GKE-AUTOPILOT-5.1.1Enable Artifact Analysis scanning for Artifact Registry container imagesgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.1.2Grant least privilege IAM access to Artifact Registry repositoriesgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.1.3Enforce Binary Authorization for trusted GKE container image deploymentsgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.2.1Use a custom least privilege node service account for GKE Autopilotgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.4.1Enable VPC Flow Logs and Intranode Visibilitygke-autopilot · Уровень 1Средний
TMA-GKE-AUTOPILOT-5.4.2Restrict GKE control plane access with authorized networksgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.4.3Use DNS based access or private GKE control plane endpointsgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.4.4Ensure private GKE nodes are configured without external IP addressesgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.4.5Use Google managed SSL certificates for GKE Ingress TLSgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.5.1Use Google Groups to centrally manage Kubernetes RBAC access for GKE clustersgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-5.6.1Use CMEK protected StorageClasses for GKE Persistent Disk volumesgke-autopilot · Уровень 2Средний
TMA-GKE-AUTOPILOT-4.5.1Enforce image provenance using Binary Authorization for GKEgke-autopilot · Уровень 2Низкий