checkov
checkov copied to clipboard
feat(terraform): add CKV2_AZURE_23 to ensure that AKS cluster disables local accounts
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Description
This policy doesn't exist yet in Checkov and is a security best practice https://docs.microsoft.com/en-us/azure/aks/operator-best-practices-identity
Checklist:
- [X] My code follows the style guidelines of this project
- [X] I have performed a self-review of my own code
- [X] I have commented my code, particularly in hard-to-understand areas
- [X] I have made corresponding changes to the documentation
- [X] I have added tests that prove my feature, policy, or fix is effective and works
- [X] New and existing tests pass locally with my changes
- [X] Any dependent changes have been merged and published in downstream modules