TMA-GITHUB-5.2.3
Ensure access to production environment is limited
Description
Restrict access to the production environment to a few trusted and qualified users only. The production environment is an extremely sensitive one. It directly affects the customer experience and trust in a product, which has serious effects on the organization itself. Reported as a manual review item: no reliable read-only gh api check exists for this control.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that the production environment is accessible only to trusted and qualified users. Expected state: Restrict access to the production environment to trusted and qualified users.
How it is fixed
Fix method: Guidance or infrastructure patch
Restrict access to the production environment to trusted and qualified users.
Properties
- Operating systems
- Any
- Tags
- githubdeployment
- Reference
- CIS GitHub Benchmark v1.2.0 - 5.2.3 Ensure access to production environment is limited