Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE clusters should have Binary Authorization enabled
This control ensures that binary authorization is enabled on GKE clusters. The related Checkov check, CKV_GCP_66, is titled "Ensure use of Binary Authorization" and looks at the `google_container_cluster` resource type for GKE clusters.
What this control checks
GKE clusters must have binary authorization enabled
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- ID.RA-09
- PR.PS-01
- PR.PS-05
- PR.PS-06
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_binary_authorization_enabled - Checkov Check:
CKV_GCP_66 - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_binary_authorization_enabled
Last reviewed: 2026-10-09