TMAegis
More rules for ibmcloud

TMA-IBMCLOUD-1.15

Ensure a support access group has been created to manage incidents with IBM Support

MediumLevel 1Manual reviewibmcloud

Description

If you experience problems with IBM Cloud®, you can use support cases to get help with technical, access (IAM), billing & usage, and invoice or sales inquiry issues. You can create and manage a support case by using the Support Center. Access to Support Center is governed via IAM roles. In order to access Support Center, a user must have viewer or higher on the Support Center service. To create or edit service cases, a user must have editor or higher on the Support Center service. After you submit a support case, the support team investigates the issue based on your type of support plan. The types of available support depends on the support level of the account. Your support plan also determines the severity level that you can assign to support cases. For more information, see Case severity and response time. Support cases are used to raise issues to IBM Cloud. Access to IBM Cloud Sup...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Using Console: 1. In the IBM Cloud console, go to Manage, Access (IAM), and then select Access Groups. 2. Look for an access group relating to Support Center. Access Group names are customizable and vary from customer to customer. 3. To verify the access policies for an Access Group, click on an Access Group name and then click Access policies. 4. Check for access policies on the Support Center service.

How it is fixed

Fix method: Guidance or infrastructure patch

Using Console: 1. In the IBM Cloud console, go to Manage, Access (IAM), and then select Access Groups. 2. Select Create Access Group. 3. Give the Access Group a descriptive name, for example, Support Center Viewers or Support Center Admins. 4. Optionally, provide a brief description. 5. Click Create. 6. Once the Access Group is created, click on the Access Policies tab. 7. Click Assign Access. 8. Click on Account Management and select Support Center from the drop down menu. 9. Select the Support Center role(s) that meet your use case. Descriptions are provided for each role in the IAM UI. 10. Click add. 11. Click Assign. 12. Click on the Users tab. 13. Click Add users 14. Select users from the list and click Add to group.

Properties

Operating systems
Any
Tags
access-controlcloudibmcloud
Reference
CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.15 Ensure a support access group has been created to manage incidents with IBM Support