Download Udemy – Certified Kubernetes Security Specialist Masterclass 2023-6

Cluster setup

1. Use network security policies to restrict access at the cluster level
2. Use the CIS benchmark to check the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi).
3. Configure Ingress objects with security controls properly
4. Protect Metadata
5. Minimize the use and access to GUI elements
6. Check the platform before doing any deployment

Increased cluster security

1. Restrict access to the Kubernetes API
2. Use role-based access controls to minimize security vulnerabilities
3. Use caution when using service accounts, for example, disable defaults, minimize newly created permissions.
4. Update Kubernetes regularly

Increase system security

1. Minimize IAM roles
2. Minimize external network access
3. Use kernel security enhancement tools like AppArmor, seccomp properly

Minimize Microservice Vulnerabilities

1. Set the appropriate security domains at the operating system level
2. Manage Kubernetes secrets
3. Using container runtime sandtime boxes in multi-tenant environments (eg gvisor, kata containers)
4. Implement pod-to-pod encryption using mTLS

Supply Chain Security

1. Reduce the Base Image footprint as much as possible
2. Secure your supply chain: whitelist authorized registries, sign and verify images
3. Using static analysis of user workloads (e.g. Kubernetes resources, Docker files)
4. Scan images for known vulnerabilities

Monitoring, Logging and Runtime Security

1. Conduct behavioral analysis of process and syscall file activities at the host and container level to identify malicious activities
2. Identify threats to physical infrastructure, applications, networks, data, users, and workloads
3. Detect all stages of an attack regardless of where it occurs and how it spreads
4. Conduct in-depth analytical research and identify risks in the environment
5. Ensure immutability of containers at runtime
6. Use audit logs to monitor access

Installation guide

After Extract, view with your favorite Player.

Subtitle: None

Quality: 720p