TMAegisBeta
de

Regel-Explorer

Durchsuchen Sie jede Härtungsregel im Katalog. Filtern Sie nach Plattform, Schweregrad, Profilstufe und danach, ob die Prüfung automatisierbar ist.

81 Regeln gefundenvon 16.927Seite 3 von 4

IDTitelSchweregrad
TMA-IBMCLOUD-5.1Ensure IBM Cloudant encryption is enabled with customer managed keysibmcloud · Stufe 2Mittel
TMA-IBMCLOUD-6.1.2Ensure Web application firewall is ENABLED in IBM Cloud Internet Services (CIS)ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.1.3Ensure DDoS protection is Active on IBM Cloud Internet Servicesibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.2.1Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 22ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.2.2Ensure the default security group of every VPC restricts all trafficibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.2.3Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.2.4Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-6.2.5Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-7.1.1Ensure data in Kubernetes secrets is encrypted using a Key Management Service (KMS) provideribmcloud · Stufe 2Mittel
TMA-IBMCLOUD-7.1.2Ensure TLS 1.2+ for all inbound traffic at IBM Cloud Kubernetes Service Ingressibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-7.1.3Ensure IBM Cloud Kubernetes Service worker nodes are updated to the latest version to ensure patching of vulnerabilitiesibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-7.1.4Ensure IBM Cloud Kubernetes Service cluster has image pull secrets enabledibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-8.1.1.1Ensure IBM Key Protect has automated rotation for customer managed keys enabledibmcloud · Stufe 2Mittel
TMA-IBMCLOUD-8.2.1Ensure certificates imported into or generated through IBM Cloud® Secrets Manager are automatically renewed before expirationibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.2Ensure no workspace security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.3Ensure no workspace network security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.4Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any infrastructure portsibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.5Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any administrative portsibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.6Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any fileshare portibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-9.7Ensure no workspace network security groups allow inbound traffic from the Internet allowing access from 0.0.0.0/0 to telnet port (23) or RSH port (514)ibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-KEY-PROTECT-ROTATIONEnsure Key Protect root keys have a rotation policyibmcloud · Stufe 1Mittel
TMA-IBMCLOUD-RESTRICT-API-KEY-CREATIONEnsure creation of platform API keys is restrictedibmcloud · Stufe 2Mittel
TMA-IBMCLOUD-RESTRICT-SERVICE-ID-CREATIONEnsure creation of service IDs is restrictedibmcloud · Stufe 2Mittel
TMA-IBMCLOUD-VPC-FLOW-LOGSEnsure Flow Logs are enabled for every VPCibmcloud · Stufe 2Mittel
TMA-IBMCLOUD-2.1.2Ensure network access for Cloud Object Storage is restricted to specific IP rangeibmcloud · Stufe 2Niedrig