> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Misconfig for AWS

### Checks Performed

* [Apply Security Context To Your Pods And Containers](/docs/aws/audit/awskubernetesmisconfig/rules/aws_apply_security_context_your_pods_and_containers)
* [Consider External Secret Storage](/docs/aws/audit/awskubernetesmisconfig/rules/aws_consider_external_secret_storage)
* [Consider Fargate Running Untrusted Workloads](/docs/aws/audit/awskubernetesmisconfig/rules/aws_consider_fargate_running_untrusted_workloads)
* [Create Administrative Boundaries Between Resources Using Namespaces](/docs/aws/audit/awskubernetesmisconfig/rules/aws_administrative_boundaries_via_namespaces)
* [Create Administrative Boundaries Between Resources Using Namespaces](/docs/aws/audit/awskubernetesmisconfig/rules/aws_create_administrative_boundaries_between_resources_using_namespaces)
* [Enable Audit Logs](/docs/aws/audit/awskubernetesmisconfig/rules/aws_enable_audit_logs)
* [Encrypt Traffic Https Load Balancers With Tls Certificates](/docs/aws/audit/awskubernetesmisconfig/rules/aws_encrypt_traffic_https_load_balancers_with_tls_certificates)
* [Encrypt Traffic To HTTPS Load Balancers With TLS Certificates](/docs/aws/audit/awskubernetesmisconfig/rules/aws_encrypt_traffic_to_https_load_balancers_tls)
* [Ensure Anonymous Auth Argument Is Disabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_that_the_anonymous_auth_argument_set_disabled)
* [Ensure Audit Logs Are Collected And Managed](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_audit_logs_collected_and_managed)
* [Ensure Authorization Mode Argument Is Not Set Always Allow](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_authorization_mode_argument_is_not_always_allow)
* [Ensure Client Ca File Argument Is Set Appropriate](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_client_ca_file_argument_is_set_as_appropriate)
* [Ensure Cluster Admin Role Is Only Used Where Required](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_cluster_admin_role_only_use_where_required)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_private_endpoint_public_access_disabled)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_clusters_private_endpoint_enabled_and_public_access_disabled)
* [Ensure Clusters Are Created With Private Nodes](/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_created_with_private_nodes)
* [Ensure Clusters Are Created With Private Nodes](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_clusters_are_created_private_nodes)
* [Ensure CNI Plugin Supports Network Policies](/docs/aws/audit/awskubernetesmisconfig/rules/aws_cni_plugin_supports_network_policies)
* [Ensure Default Service Accounts Not Actively Used.](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_default_service_accounts_are_not_actively_used)
* [Ensure Event Record Qps Argument Is Set To 0 Level Which Ensures Appropriate Event Capture](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_eventrecordqps_argument_set_0_level_which_ensures_appropriate_event_capture)
* [Ensure Hostname Override Argument Is Not Set](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_hostname_override_argument_is_not_set)
* [Ensure Image Vulnerability Scanning Using Amazon Ecr Image Scanning Or Third Party Provider](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_image_vulnerability_scanning_enabled_ecr_or_third_party)
* [Ensure Image Vulnerability Scanning Using Amazon ECR Or Third Party Provider](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ecr_image_vulnerability_scanning_enabled)
* [Ensure Kubeconfig File Permissions Are Set Restrictive](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubeconfig_file_permissions_are_restrictive)
* [Ensure Kubelet Configuration File Ownership Is Set Root](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_configuration_file_ownership_set_root)
* [Ensure Kubelet Configuration File Ownership Is Set To root:root](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_config_file_ownership_root)
* [Ensure Kubelet Configuration File Permissions Are 644 Or More Restrictive](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_config_file_permissions_644)
* [Ensure Kubelet Configuration File Should Have Permissions Set Restrictive](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_configuration_file_has_permissions_restrictive)
* [Ensure Kubelet Kubeconfig File Ownership Is Set Root](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_kubeconfig_file_ownership_set_root)
* [Ensure Kubelet Kubeconfig File Ownership Is Set To root:root](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_kubeconfig_file_ownership_root)
* [Ensure Kubelet Kubeconfig File Permissions Are 644 Or More Restrictive](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_kubeconfig_file_permissions_644)
* [Ensure Kubernetes Secrets Are Encrypted Using CMKs Managed In AWS KMS](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubernetes_secrets_encrypted_with_kms_cmk)
* [Ensure Kubernetes Secrets Are Encrypted Using Customer Master Keys Managed AWS KMS](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubernetes_secrets_encrypted_customer_master_aws_kms)
* [Ensure Latest Cni Version Is Used](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_latest_cni_version_is_used)
* [Ensure Make Iptables Util Chains Argument Is Enabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_make_iptables_util_chains_argument_is_enabled)
* [Ensure Network Policy Is Enabled And Set Appropriate](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_network_policy_is_enabled_appropriate)
* [Ensure Network Policy Is Enabled And Set As Appropriate](/docs/aws/audit/awskubernetesmisconfig/rules/aws_network_policy_enabled_and_configured)
* [Ensure Protect Kernel Defaults Argument Is Enabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_protect_kernel_defaults_argument_is_enabled)
* [Ensure Read Only Port Is Secured](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_read_only_port_is_secured)
* [Ensure Rotate Certificates Argument Is Not Set Disabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_rotate_certificates_argument_is_not_disabled)
* [Ensure Rotate Kubelet Server Certificate Argument Is Enabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_rotate_kubelet_server_certificate_argument_is_enabled)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_service_account_tokens_mounted_where_necessary)
* [Ensure Streaming Connection Idle Timeout Argument Is Not Set 0](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_streaming_connection_idle_timeout_argument_not_set_to_0)
* [Ensure That A Client CA File Is Configured](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_client_ca_file_configured)
* [Ensure That All Namespaces Have Network Policies Defined](/docs/aws/audit/awskubernetesmisconfig/rules/aws_all_namespaces_have_network_policies)
* [Ensure That All Namespaces Have Network Policies Defined](/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_all_namespaces_have_network_policies_defined)
* [Ensure That Anonymous Auth Is Not Enabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_anonymous_auth_disabled)
* [Ensure That Default Service Accounts Are Not Actively Used](/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_service_accounts_not_used)
* [Ensure That Service Account Tokens Are Only Mounted Where Necessary](/docs/aws/audit/awskubernetesmisconfig/rules/aws_service_account_tokens_mounted_when_necessary)
* [Ensure That The --authorization-mode Argument Is Not Set To AlwaysAllow](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_authorization_mode_not_alwaysallow)
* [Ensure That The --eventRecordQPS Argument Is Set Appropriately](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_event_qps_appropriate)
* [Ensure That The --make-iptables-util-chains Argument Is Set To True](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_make_iptables_util_chains_true)
* [Ensure That The --read-only-port Is Disabled](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_read_only_port_disabled)
* [Ensure That The --rotate-certificates Argument Is Not Present Or Is Set To True](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_rotate_certificates_true)
* [Ensure That The --streaming-connection-idle-timeout Argument Is Not Set To 0](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_streaming_connection_idle_timeout)
* [Ensure That The RotateKubeletServerCertificate Argument Is Set To True](/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_rotate_server_certificate_true)
* [Ensure The Cluster-Admin Role Is Only Used Where Required](/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_admin_role_restricted)
* [Limit Use Of The Bind, Impersonate And Escalate Permissions](/docs/aws/audit/awskubernetesmisconfig/rules/aws_limit_bind_impersonate_escalate)
* [Manage Kubernetes Rbac Users With Aws Iam Authenticator For Kubernetes](/docs/aws/audit/awskubernetesmisconfig/rules/aws_manage_kubernete_rbac_users_with_aws_iam_authenticator_kubernetes)
* [Manage Kubernetes RBAC Users With AWS IAM Authenticator Or Upgrade AWS CLI](/docs/aws/audit/awskubernetesmisconfig/rules/aws_manage_rbac_users_with_aws_iam_authenticator)
* [Minimize Access Create Pods](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_access_create_pods)
* [Minimize Access To Create PersistentVolume Objects](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_create_persistentvolume_access)
* [Minimize Access To Create Pods](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_create_pods_access)
* [Minimize Access To Secrets](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_access_secrets)
* [Minimize Access To Secrets](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_secrets_access)
* [Minimize Access To The Proxy Sub-Resource Of Node Objects](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_node_proxy_subresource_access)
* [Minimize Access To The Service Account Token Creation](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_service_account_token_creation)
* [Minimize Access To Webhook Configuration Objects](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_webhook_configuration_access)
* [Minimize Admission Containers Wishing Share Host Ipc Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_ipc_namespace)
* [Minimize Admission Containers Wishing Share Host Process Id Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_process_id_namespace)
* [Minimize Admission Containers Wishing Share The Host Network Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_network_namespace)
* [Minimize Admission Containers With Allow Privilege Escalation](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_allow_privilege_escalation)
* [Minimize Admission Privileged Containers](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_privileged_containers)
* [Minimize Admission Root Containers](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_root_containers)
* [Minimize Cluster Access Read Only For Amazon Ecr](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_cluster_access_read_only_amazon_ecr)
* [Minimize Cluster Access To Read-Only For Amazon ECR](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_cluster_access_readonly_ecr)
* [Minimize Container Registries Only Those Approved](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_container_registries_only_those_approved)
* [Minimize Container Registries To Only Those Approved](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_container_registries_to_approved)
* [Minimize The Admission Containers With Added Capabilities](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_added_capabilities)
* [Minimize The Admission Containers With Capabilities Assigned](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_capabilities_assigned)
* [Minimize The Admission Containers With The Net Raw Capability](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_net_raw_capability)
* [Minimize The Admission Of Containers Sharing The Host IPC Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostipc_containers)
* [Minimize The Admission Of Containers Sharing The Host Network Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostnetwork_containers)
* [Minimize The Admission Of Containers Sharing The Host Process ID Namespace](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostpid_containers)
* [Minimize The Admission Of Containers With allowPrivilegeEscalation](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_allow_privilege_escalation)
* [Minimize The Admission Of Privileged Containers](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_privileged_containers)
* [Minimize User Access To Amazon Ecr](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_user_access_amazon_ecr)
* [Minimize User Access To Amazon ECR](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_user_access_to_ecr)
* [Minimize Wildcard Use In Roles And ClusterRoles](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_wildcard_roles)
* [Minimize Wildcard Use Roles And Cluster Roles](/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_wildcard_roles_cluster_roles)
* [Prefer Using Container Optimized Os When Possible](/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_container_optimize_os_when_possible)
* [Prefer Using Dedicated Amazon EKS Service Accounts](/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_dedicated_eks_service_accounts)
* [Prefer Using Dedicated Amazon Eks Service Accounts](/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_using_dedicated_amazon_eks_service_accounts)
* [Prefer Using Secrets As Files Over Secrets As Environment Variables](/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_secrets_as_files)
* [Prefer Using Secrets Files Over Secrets Environment Variables](/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_using_secrets_files_over_secrets_environment_variables)
* [Restrict Access To Control Plane Endpoint](/docs/aws/audit/awskubernetesmisconfig/rules/aws_restrict_access_to_control_plane_endpoint)
* [Restrict Access To The Control Plane Endpoint](/docs/aws/audit/awskubernetesmisconfig/rules/aws_restrict_access_control_plane_endpoint)
* [The Default Namespace Should Not Be Used](/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_namespace_not_used)
* [The Default Namespace Should Not Be Used](/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_namespace_should_not_be_used)
* [Use Cluster Access Manager API To Manage Access Controls](/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_access_manager_api)