Ensure A Pod Runs Without Privileged Containers

A Pod runs with allowPrivilegedContainer flag that gives privileged to the container. Run a Pod with allowPrivilegedContainer flag set to false will give a nonprivileged to the container.

Risk Level: medium
Cloud Entity: CFT
Spectral Rule ID: OPSHFTK8S001

REMEDIATION

set allowPrivilegedContainer to false

- allowPrivilegedContainer: true
+ allowPrivilegedContainer: false

References:

AWS Key Management Service (KMS)

AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data, and uses FIPS 140-2 validated hardware security modules to protect the security of your keys. AWS Key Management Service is integrated with most other AWS services to help you protect the data you store with these services. AWS Key Management Service is also integrated with AWS CloudTrail to provide you with logs of all key usage to help meet your regulatory and compliance needs.