eks-cis-5.1.4.rb

control 'eks-cis-5.1.4' do
  title 'Minimize Container Registries to only those approved'
  desc  'Use approved container registries.'
  desc  'rationale', "Allowing unrestricted access to external container
registries provides the opportunity for malicious or unapproved containers to
be deployed into the cluster. Allowlisting only approved container registries
reduces this risk."
  desc  'check', ''
  desc  'fix', ''
  impact 0.5
  tag severity: 'medium'
  tag gtitle: nil
  tag gid: nil
  tag rid: nil
  tag stig_id: nil
  tag fix_id: nil
  tag cci: nil
  tag nist: ['CM-2', 'CM-2 (2)']
  tag cis_level: 2
  tag cis_controls: [
    { '7' => ['5.2', '5.3'] }
  ]
  tag cis_rid: '5.1.4'

  describe 'Manual control' do
    skip 'Manual review is required to ensure images originate from only approved container registries'
  end
end