Detections
Analytics

CIS Google Kubernetes Engine (GKE) Autopilot v1.1.0 L1

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Google Kubernetes Engine (GKE) Autopilot v1.1.0 L1

Updated: 3/13/2026

Authority: CIS

Plugin: GCP

Revision: 1.1

Estimated Item Count: 13

File Details

Filename: CIS_Google_Kubernetes_Engine_GKE_Autopilot_v1.1.0_L1.audit

Size: 30.9 kB

MD5: 93e4a1553769899dd9c79d77fbd367bf
SHA256: 3ee629834f2a7d45d13a3907cef13c9e370de536d9b03f80949b07c0eada1b40

Audit Items

DescriptionCategories
4.1.1 Ensure that the cluster-admin role is only used where required
4.1.2 Minimize access to secrets
4.1.3 Minimize wildcard use in Roles and ClusterRoles
4.1.4 Ensure that default service accounts are not actively used
4.1.5 Ensure that Service Account Tokens are only mounted where necessary
4.1.6 Avoid use of system:masters group
4.1.7 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster
4.1.8 Avoid bindings to system:anonymous
4.1.9 Avoid non-default bindings to system:unauthenticated
4.1.10 Avoid non-default bindings to system:authenticated
4.2.1 Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces.
4.6.1 Create administrative boundaries between resources using namespaces
5.4.1 Enable VPC Flow Logs and Intranode Visibility