turbot/alicloud_compliance

Control: 7.9 Ensure Kubernetes Cluster is created with Private cluster enabled

Description

A private cluster is a cluster that makes your master inaccessible from the public internet. In a private cluster, nodes do not have public IP addresses, so your workloads run in an environment that is isolated from the internet. Nodes have addresses only in the private address space. Nodes and masters communicate with each other privately using VPC peering.

Remediation

From Console

  1. Logon to ACK console.
  2. Click the Create Kubernetes Cluster button and make sure Public Access is not enabled.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_7_9

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_7_9 --share

SQL

This control uses a named query:

manual_control

Tags