Skip to main content

​
More Info:

Pods that do not need to access the Kubernetes API should not mount service account tokens. Disabling token automounting reduces the blast radius of a compromised pod.

​
Risk Level

Medium

​
Address

Security

​
Compliance Standards

  • CIS AKS

​
Triage and Remediation

​
Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.