For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-00k-5j9.md. A documentation index is available at /llms.txt.

A Kubernetes audit policy should exist

Description

Kubernetes should audit the details of requests made to the API server.

Remediation

  1. Refer to the Kubernetes documentation on how to create an audit policy file for your cluster.
  2. Assign the policy to the --audit-policy-file parameter.
--audit-policy-file=<path-to-audit-policy-file>