GKE using Legacy Authorization (ABAC)
Legacy Authorization, also known as Attribute-Based Access Control (ABAC) has been superseded by Role-Based Access Control (RBAC) and is not...
All articles by The Orca Security Team
EKS Cluster with enabled Public Endpoint or disabled Private Endpoint
In a private cluster, the master node has two endpoints, a private and public endpoint. The private endpoint is the...
EKS Node with public IP address
Orca has detected that the EKS node {K8sNode} has a public IP address. Disabling public IP addresses on cluster nodes...
EKS Cluster without Fargate Profiles
Orca has detected that the EKS Cluster {AwsEksCluster} does not utilize Fargate in order to run its tasks. If you...
Minimize cluster access to read-only for Amazon ECR
The EKS Cluster Service Account only requires pull access to containers to deploy onto Amazon EKS. Restricting permissions follows the...
GKE Nodepool creating nodes without Secure Boot
Secure Boot helps ensure that the system only runs authentic software by verifying the digital signature of all boot components,...
GKE cluster is not using Cloud KMS Key for database encryption
When Using Application-layer Secrets Encryption you can use a key that you manage in Cloud KMS, to encrypt data at...
Auto Scaling group (ASG) should cover multiple availability zones
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Auto Scaling helps...
Auto Scaling Group (ASG) health checks misconfiguration
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Auto Scaling helps...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.