💼 6.2.2 Prefer using dedicated GCP Service Accounts and Workload Identity (Not Scored)
- ID:
/frameworks/cis-gke-v1.0.0/06/02/02
Stats​
not available
Description​
Kubernetes workloads should not use cluster node service accounts to authenticate to Google Cloud APIs. Each Kubernetes Workload that needs to authenticate to other Google services using Cloud IAM should be provisioned a dedicated Service account. Enabling Workload Identity manages the distribution and rotation of Service account keys for the workloads to use.
Similar​
Similar Sections (Give Policies To)​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CIS GKE v1.8.0 → 💼 5.2.2 Prefer using dedicated GCP Service Accounts and Workload Identity (Manual) | no data |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|