domains / families / security / auditing-kubernetes-cluster-rbac

auditing-kubernetes-cluster-rbac

separate

'Auditing Kubernetes cluster RBAC configurations to identify overly permissive

When to use

• When performing security assessments of Kubernetes clusters (EKS, GKE, AKS, or self-managed)
• When validating that RBAC policies enforce least privilege for users and service accounts
• When investigating potential lateral movement or privilege escalation within a Kubernetes cluster
• When compliance audits require documentation of access controls and permissions
• When onboarding new teams to a shared cluster and defining appropriate RBAC policies

When not to use

• network policy auditing
• container image scanning
• runtime security monitoring

Skill page

Source