mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2025-01-15 18:20:54 +00:00
a38a3c5bbc
* feat(cfg): add EKS 1.5.0 * fix(cfg): target map * fix: update eks job * fix: target mapping * feat: use CIS EKS 1.5.0 by default * fix: scored in node.yaml Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * doc: add CIS EKS 1.5.0 Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> --------- Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com>
33 lines
1.0 KiB
YAML
33 lines
1.0 KiB
YAML
---
|
|
controls:
|
|
version: "eks-1.5.0"
|
|
id: 2
|
|
text: "Control Plane Configuration"
|
|
type: "controlplane"
|
|
groups:
|
|
- id: 2.1
|
|
text: "Logging"
|
|
checks:
|
|
- id: 2.1.1
|
|
text: "Enable audit Logs (Automated)"
|
|
remediation: |
|
|
From Console:
|
|
1. For each EKS Cluster in each region;
|
|
2. Go to 'Amazon EKS' > 'Clusters' > '' > 'Configuration' > 'Logging'.
|
|
3. Click 'Manage logging'.
|
|
4. Ensure that all options are toggled to 'Enabled'.
|
|
API server: Enabled
|
|
Audit: Enabled
|
|
Authenticator: Enabled
|
|
Controller manager: Enabled
|
|
Scheduler: Enabled
|
|
5. Click 'Save Changes'.
|
|
|
|
From CLI:
|
|
# For each EKS Cluster in each region;
|
|
aws eks update-cluster-config \
|
|
--region '${REGION_CODE}' \
|
|
--name '${CLUSTER_NAME}' \
|
|
--logging '{"clusterLogging":[{"types":["api","audit","authenticator","controllerManager","scheduler"],"enabled":true}]}'
|
|
scored: false
|