Ensure Service Account Tokens Are Only Mounted Where Necessary

Pods and service accounts that do not call the API server should not mount service account tokens, reducing the credentials exposed in the workload.

Medium

Security

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I