Skip to content

Kubernetes Protection

Jump to bottom
bk-cs edited this page Mar 14, 2022 · 5 revisions

CrowdStrike Falcon API DocumentationEU 1US-1US-2US-GOV-1

Command Permission
Edit-FalconContainerAwsAccount kubernetes-protection:write
Get-FalconContainerAwsAccount kubernetes-protection:read
Get-FalconContainerCloud kubernetes-protection:read
Get-FalconContainerCluster kubernetes-protection:read
Get-FalconContainerToken container-security:read
Invoke-FalconContainerScan kubernetes-protection:write
New-FalconContainerAwsAccount kubernetes-protection:write
New-FalconContainerKey kubernetes-protection:write
Receive-FalconContainerYaml kubernetes-protection:read
Remove-FalconContainerAwsAccount kubernetes-protection:write

Managing Kubernetes protection AWS accounts

Create a new AWS account and generate installation script

New-FalconContainerAwsAccount -Id <id> -Region <string>

List AWS account details

Get-FalconContainerAwsAccount -Detailed

Update existing AWS accounts

Edit-FalconContainerAwsAccount -Ids <id>, <id> -Region <string>

Remove AWS accounts

Remove-FalconContainerAwsAccount -Ids <id>, <id>

Verify Kubernetes protection configuration

List acknowledged cloud locations

Get-FalconContainerCloud -Clouds aws

List acknowledged clusters

Get-FalconContainerCluster -ClusterService eks

Initiate scan of Kubernetes footprint

Invoke-FalconContainerScan -ScanType full

Manage Docker registry integration

Regenerate API key

New-FalconContainerKey

List API credentials

Get-FalconContainerToken

Generate sample Helm values file

Receive-FalconContainerYaml -ClusterName <string> -Path .\values.yaml

Clone this wiki locally