From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Join today to access over 24,700 courses taught by industry experts.
Automation and tooling
From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Automation and tooling
All right. So you saw the report. You saw the Kubernetes CIS report, it was over 200 pages. Now, I'm pretty certain and you probably don't want to read that whole thing. And if you do, more power to you. I think that's great. But, you know, let's say you don't want to read it and let's say you don't want to memorize it. Well, luckily, there are a few different ways that we can automate compliance. Now, three of the biggest tools I would say in the Kubernetes space right now for this is Kubescape, kube-bench by Aqua Security and Checkov. So Kubescape can literally scan everything from a cluster to the pods to the Kubernetes manifest. It even scans RBAC. So there's this like RBAC visualizer where you can actually see this service account has this cluster role and has this cluster binding and et cetera, you can see users, you can see RBAC, all of it. All right. It uses CIS. So it does scan against CIS standards, which is great because guess what? Now you don't have to read those 200-page…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.