Control: 7.9 Ensure Kubernetes Cluster is created with Private cluster enabled
Description
A private cluster is a cluster that makes your master inaccessible from the public internet. In a private cluster, nodes do not have public IP addresses, so your workloads run in an environment that is isolated from the internet. Nodes have addresses only in the private address space. Nodes and masters communicate with each other privately using VPC peering.
Remediation
From Console
- Logon to ACK console.
- Click the
Create Kubernetes Clusterbutton and make surePublic Accessisnot enabled.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_7_9Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_7_9 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;