Regel-Explorer
Durchsuchen Sie jede Härtungsregel im Katalog. Filtern Sie nach Plattform, Schweregrad, Profilstufe und danach, ob die Prüfung automatisierbar ist.
110 Regeln gefundenvon 16.927Seite 1 von 5
| ID | Titel | Plattform | Schweregrad | Stufe | Prüfung |
|---|---|---|---|---|---|
| TMA-GCP-BIGQUERY-DATASETS-NOT-PUBLIC | Ensure BigQuery datasets are not anonymously or publicly accessiblegcp · Stufe 1 | gcp | Kritisch | 1 | Automatisiert |
| TMA-GCP-CLOUDSQL-NO-OPEN-AUTHORIZED-NETWORKS | Ensure Cloud SQL instances do not allow 0.0.0.0/0 in authorised networksgcp · Stufe 1 | gcp | Kritisch | 1 | Automatisiert |
| TMA-GCP-1.1.1 | Ensure Super Admin Email Address Is Not Tied To A Single Usergcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-1.1.2 | Ensure Super Admin Account Is Not Used For Google Cloud Administrationgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-1.3 | Ensure that Multi-Factor Authentication is 'Enabled' for All Non-Service Accountsgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-1.10 | Ensure That Cloud KMS Cryptokeys Are Not Anonymously or Publicly Accessiblegcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-1.11 | Ensure KMS Encryption Keys Are Rotated Within a Period of 90 Daysgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-2.5 | Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changesgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-2.6 | Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changesgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-2.13 | Ensure That Cloud DNS Logging Is Enabled for All VPC Networksgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-2.14 | Ensure Cloud Asset Inventory Is Enabledgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-4.6 | Ensure That IP Forwarding Is Not Enabled on Instancesgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-5.1 | Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessiblegcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-6.1.1 | Ensure That a MySQL Instance Does Not Allow Anyone To Connect With Administrative Privilegesgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-6.4 | Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSLgcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-7.1 | Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessiblegcp · Stufe 1 | gcp | Hoch | 1 | Manuelle Prüfung |
| TMA-GCP-CLOUDSQL-NO-PUBLIC-IP | Ensure Cloud SQL instances do not have public IPsgcp · Stufe 2 | gcp | Hoch | 2 | Automatisiert |
| TMA-GCP-CLOUDSQL-REQUIRE-SSL | Ensure Cloud SQL instances require all incoming connections to use SSLgcp · Stufe 1 | gcp | Hoch | 1 | Automatisiert |
| TMA-GCP-FIREWALL-NO-RDP-FROM-INTERNET | Ensure RDP access is restricted from the Internetgcp · Stufe 2 | gcp | Hoch | 2 | Automatisiert |
| TMA-GCP-FIREWALL-NO-SSH-FROM-INTERNET | Ensure SSH access is restricted from the Internetgcp · Stufe 2 | gcp | Hoch | 2 | Automatisiert |
| TMA-GCP-NO-DEFAULT-SA-FULL-SCOPE | Ensure instances do not use the default compute service account with full access to all Cloud APIsgcp · Stufe 1 | gcp | Hoch | 1 | Automatisiert |
| TMA-GCP-NO-USER-MANAGED-SA-KEYS | Ensure there are only GCP-managed service account keys for each service accountgcp · Stufe 1 | gcp | Hoch | 1 | Automatisiert |
| TMA-GCP-STORAGE-PUBLIC-ACCESS-PREVENTION | Ensure Cloud Storage buckets enforce public access preventiongcp · Stufe 1 | gcp | Hoch | 1 | Automatisiert |
| TMA-GCP-1.1.3 | Ensure Folders Are Structured By Environment And Sensitivitygcp · Stufe 2 | gcp | Mittel | 2 | Manuelle Prüfung |
| TMA-GCP-1.1.4 | Ensure Organization Policies Are Configured For Centralized Constraintsgcp · Stufe 2 | gcp | Mittel | 2 | Manuelle Prüfung |