Cloudanix home page
Search...
⌘K
Community
Login
Login
Search...
Navigation
Ensure Service Account Tokens Are Only Mounted Where Necessary
Overview
AWS
Azure
GCP
GitHub
On-Demand Scan
Kubernetes
Integrations
Azure Introduction
Authenticating your Azure account
Azure Pricing
Azure Services which determine your cost
Azure Threats
Getting Started with Azure Realtime Events
Azure Misconfigurations
Getting Started with Azure Audit
AppServices Audit
Compute Audit
IAM Audit
Network Audit
Security Center Audit
Sql Audit
Storage Audit
Key Vault Audit
Monitor Audit
IAM Deep Dive
On this page
More Info:
Risk Level
Address
Compliance Standards
Additional Reading:
Ensure Service Account Tokens Are Only Mounted Where Necessary
More Info:
Service accounts tokens should not be mounted in pods except where the workload running in the pod explicitly needs to communicate with the API server
Risk Level
Medium
Address
Security
Compliance Standards
CISAKS
Additional Reading:
https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
Assistant
Responses are generated using AI and may contain mistakes.