diff --git a/controls/C-0262-anonymousaccessisenabled.json b/controls/C-0262-anonymousaccessisenabled.json index c82021bd..1479170b 100644 --- a/controls/C-0262-anonymousaccessisenabled.json +++ b/controls/C-0262-anonymousaccessisenabled.json @@ -5,6 +5,10 @@ "remediation": "Review and modify your cluster's RBAC configuration to ensure that only authenticated and authorized users have appropriate permissions based on their roles and responsibilities within your system.", "test": "Checks if ClusterRoleBinding/RoleBinding resources give permissions to anonymous user. Also checks in the apiserver if the --anonymous-auth flag is set to false", "attributes": { + "controlTypeTags": [ + "security", + "compliance" + ] }, "rulesNames": [ "anonymous-access-enabled" diff --git a/frameworks/security.json b/frameworks/security.json index 63f59130..b82ac1d5 100644 --- a/frameworks/security.json +++ b/frameworks/security.json @@ -174,6 +174,12 @@ "name": "Anonymous access enabled" } }, + { + "controlID": "C-0264", + "patch": { + "name": "PersistentVolume without encyption" + } + }, { "controlID": "C-0265", "patch": {