> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Ensure Audit Policy Covers Key Security Concerns

### More Info:

Ensure that the audit policy created for the cluster covers key security concerns.

### Risk Level

High

### Address

Security

### Compliance Standards

* CIS Kubernetes

### Triage and Remediation

<Tabs>
  <Tab title="Remediation">
    ### Remediation

    <AccordionGroup>
      <Accordion title="Using Console" defaultOpen="true">
        Review the audit policy provided for the cluster and ensure that it covers at least thefollowing areas :-• Access to Secrets managed by the cluster. Care should be taken to only logMetadata for requests to Secrets, ConfigMaps, and TokenReviews, in order toavoid the risk of logging sensitive data.• Modification of pod and deployment objects.• Use of pods/exec, pods/portforward, pods/proxy and services/proxy.For most requests, minimally logging at the Metadata level is recommended (the mostbasic level of logging).
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>

### Additional Reading:

* [https://github.com/k8scop/k8s-security-dashboard/blob/master/configs/kubernetes/adv-audit.yaml](https://github.com/k8scop/k8s-security-dashboard/blob/master/configs/kubernetes/adv-audit.yaml)