The container platform must enforce access restrictions for container platform configuration changes.

Configuration changes cause the container platform to change the way it operates. These changes can be used to improve the system with added features or performance, but these configuration changes can also be used to introduce malicious features and degrade performance. To control the configuration changes made to the container platform, it is important that only authorized users are allowed, through container platform enforcement, to make configuration changes.

Review documentation and configuration settings to determine if the container platform enforces access restrictions associated with changes to container platform components configuration.

If the container platform does not enforce such access restrictions, this is a finding.

Configure the container platform to enforce access restrictions associated with changes to the container platform components configuration.