TMAegis
vi

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 33 quy tắctrên 8.597Trang 1 / 2

IDTiêu đềMức độ nghiêm trọng
TMA-AKS-AUTOMATIC-4.1.1Ensure that the cluster-admin role is only used where requiredaks-automatic · Cấp 1Nghiêm trọng
TMA-AKS-AUTOMATIC-4.2.1Minimize the admission of privileged containersaks-automatic · Cấp 1Nghiêm trọng
TMA-AKS-AUTOMATIC-4.1.2Ensure access to Secrets is minimized and granted only where requiredaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.5Ensure that default service accounts are not actively usedaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.6Ensure that Service Account Tokens are only mounted where necessaryaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.7Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes clusteraks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.11Minimize access to webhook configuration objectsaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.12Minimize access to the service account token creationaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.2.2Minimize the admission of containers wishing to share the host process ID namespaceaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.2.3Minimize the admission of containers wishing to share the host IPC namespaceaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.2.4Minimize the admission of containers wishing to share the host network namespaceaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.2.5Minimize the admission of containers with allowPrivilegeEscalationaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-5.2.1Use dedicated Kubernetes service accounts for AKS workloadsaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-5.3.1Encrypt Kubernetes Secrets at rest with AKS KMS protectionaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-5.4.2Use private AKS clusters and disable the public API server FQDNaks-automatic · Cấp 2Cao
TMA-AKS-AUTOMATIC-5.4.3Ensure clusters are created with Private Nodesaks-automatic · Cấp 1Cao
TMA-AKS-AUTOMATIC-4.1.3Minimize wildcard use in Roles and ClusterRolesaks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-4.1.4Minimize access to create podsaks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-4.1.8Minimize access to create persistent storageaks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-4.1.9Minimize access to the nodes/proxy subresourceaks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-4.1.10Minimize access to the approval subresource of CertificateSigningRequests objectsaks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-4.4.1Prefer exposing secrets as mounted files rather than environment variablesaks-automatic · Cấp 2Trung bình
TMA-AKS-AUTOMATIC-4.4.2Consider external secret storageaks-automatic · Cấp 2Trung bình
TMA-AKS-AUTOMATIC-5.1.1Ensure container image vulnerability scanning with Defender for Containers or a third-party provideraks-automatic · Cấp 1Trung bình
TMA-AKS-AUTOMATIC-5.1.2Minimize and scope access to Azure Container Registry (ACR)aks-automatic · Cấp 1Trung bình