aws_compliance

AWS Compliance

This control checks whether an AWS EKS cluster is running on a supported Kubernetes version. The control fails if the EKS cluster is running on an unsupported version. If your application doesn't require a specific version of Kubernetes, we recommend that you use the latest available Kubernetes version that's supported by EKS for your clusters.

eks_cluster_with_latest_kubernetes_version

pci_dss_v321_requirement_6_2_b

6.2.b For a sample of system components and related software, compare the list of security patches installed on each system to the most recent vendor security-patch list, to verify that the applicable critical vendor-supplied security patches are installed within one month of release, all applicable vendor-supplied security patches are installed within an appropriate time frame (for example, within three months)

acsc_essential_eight_ml_1_2_5

ACSC-EE-ML1-2.5: Patch applications ML1

acsc_essential_eight_ml_1_6_5

ACSC-EE-ML1-6.5: Patch operating systems ML1

acsc_essential_eight_ml_1_6_6

ACSC-EE-ML1-6.6: Patch operating systems ML1

acsc_essential_eight_ml_1_6_7

ACSC-EE-ML1-6.7: Patch operating systems ML1

acsc_essential_eight_ml_2_6_5

ACSC-EE-ML2-6.5: Patch operating systems ML2

acsc_essential_eight_ml_2_6_6

ACSC-EE-ML2-6.6: Patch operating systems ML2

acsc_essential_eight_ml_2_6_7

ACSC-EE-ML2-6.7: Patch operating systems ML2

acsc_essential_eight_ml_3_2_9

ACSC-EE-ML3-2.9: Patch applications ML3

acsc_essential_eight_ml_3_6_5

ACSC-EE-ML3-6.5: Patch operating systems ML3

acsc_essential_eight_ml_3_6_6

ACSC-EE-ML3-6.6: Patch operating systems ML3

acsc_essential_eight_ml_3_6_7

ACSC-EE-ML3-6.7: Patch operating systems ML3

acsc_essential_eight_ml_3_6_8

ACSC-EE-ML3-6.8: Patch operating systems ML3

all_controls_eks

nist_csf_pr_ip_1

PR.IP-1

EKS clusters should run on a supported Kubernetes version

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: EKS clusters should run on a supported Kubernetes version

Description

Usage

SQL

Tags