More Info:

Use Container-Optimized Os (Cos) As A Managed, Optimized And Hardened Base Os That Limits The Host’S Attack Surface.

Risk Level

High

Address

Security

Compliance Standards

CISGKE

Additional Reading: