Checks
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
Disable profiling, if not needed.
Do not bind the scheduler service to non-loopback insecure addresses.
Configure TLS encryption for the etcd service.
Enable client authentication on etcd service.
Do not use self-signed certificates for TLS.
etcd should be configured to make use of TLS encryption for peer connections.
etcd should be configured for peer authentication.
Do not use self-signed certificates for TLS.
Ensure that the API server pod specification file has permissions of 600 or more restrictive.
Ensure that the API server pod specification file ownership is set to root:root.
Ensure that the controller manager pod specification file has permissions of 600 or more restrictive.
Ensure that the controller manager pod specification file ownership is set to root:root.
Ensure that the scheduler pod specification file has permissions of 600 or more restrictive.
Ensure that the scheduler pod specification file ownership is set to root:root.
Ensure that the etcd pod specification file has permissions of 600 or more restrictive.
Ensure that the etcd pod specification file ownership is set to root:root.
Ensure that the container network interface file has permissions of 600 or more restrictive.
Ensure that the container network interface file ownership is set to root:root.
Ensure that the etcd data directory has permissions of 700 or more restrictive.
Ensure that the etcd data directory ownership is set to etcd:etcd.
Ensure that the admin config file has permissions of 600 or more restrictive.
Ensure that the admin config file ownership is set to root:root.
Ensure that the scheduler config file has permissions of 600 or more restrictive.
Ensure that the scheduler config file ownership is set to root:root.