Ensure that Config Assessment is granted with privilege

MediumLevel 1Manual reviewalibaba

Description

Grant Security Center's Cloud Platform Configuration Assessment the privilege to access other cloud product. Prior to using Cloud Platform Configuration Assessment, it requires privilege to assess other cloud product's settings. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Using the management console: 1. Logon to Security Center Console. 2. Select Config Assessment. 3. Ensure that the prompt of asking privilege is not shown. Expected state: Using the management console: 1. Logon to Security Center Console. 2. Select Config Assessment. 3. Click Authorize.

How it is fixed

Fix method: Guidance or infrastructure patch

Using the management console: 1. Logon to Security Center Console. 2. Select Config Assessment. 3. Click Authorize.

Properties

Operating systems: Any
Tags: alibabasecurity-center
Reference: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.6 Ensure that Config Assessment is granted with privilege