Cis Oke V180 5.4.5

Encrypt traffic to HTTPS load balancers with TLS certificates (Manual)

cyberstrikeus Updated

File contents

5.4.5 Encrypt traffic to HTTPS load balancers with TLS certificates (Manual)

Profile Applicability

  • Level 1

Description

Encrypt traffic to HTTPS load balancers using TLS certificates.

Rationale

Encrypting traffic between users and your Kubernetes workload is fundamental to protecting data sent over the web.

Audit

Your load balancer vendor can provide details on auditing the certificates and policies required to utilize TLS.

Remediation

Your load balancer vendor can provide details on configuring HTTPS with TLS.

CIS Controls

Controls Version Control IG 1 IG 2 IG 3
v8 3.10 Encrypt Sensitive Data in Transit x x
v7 14.4 Encrypt All Sensitive Information in Transit x x

MITRE ATT&CK Mappings

Techniques / Sub-techniques Tactics Mitigations
T1609 TA0002 M1035

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Server_Software/Kubernetes/CIS_OKE_Benchmark_v1.8.0/cis-oke-v180-5.4.5 commit b42c079aec

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-oke-v180-5-4-5