V-233188

Discussion

Configuration changes cause the container platform to change the way it operates. These changes can be used to improve the system with added features or performance, but these configuration changes can also be used to introduce malicious features and degrade performance. To control the configuration changes made to the container platform, it is important that only authorized users are allowed, through container platform enforcement, to make configuration changes.

Check Content

Review documentation and configuration settings to determine if the container platform enforces access restrictions associated with changes to container platform components configuration. 

If the container platform does not enforce such access restrictions, this is a finding.