Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
16,927 rules foundPage 16 of 678
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ALIBABA-5.4 | Ensure that 'Secure transfer required' is set to 'Enabled'alibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-5.5 | Ensure that the shared URL signature expires within an houralibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-5.6 | Ensure that URL signature is allowed only over httpsalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-6.3 | Ensure that 'Auditing' is set to 'On' for applicable database instancesalibaba · Level 2 | alibaba | Medium | 2 | Automated |
| TMA-ALIBABA-6.4 | Ensure that 'Auditing' Retention is 'greater than 6 months'alibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-6.5 | Ensure that 'TDE' is set to 'Enabled' on for applicable database instancealibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-6.7 | Ensure parameter 'log_connections' is set to 'ON' for PostgreSQL Databasealibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-6.8 | Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Serveralibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-6.9 | Ensure server parameter 'log_duration is set to 'ON' for PostgreSQL Database Serveralibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-7.1 | Ensure Log Service is set to 'Enabled' on Kubernetes Engine Clustersalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.2 | Ensure CloudMonitor is set to Enabled on Kubernetes Engine Clustersalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.3 | Ensure role-based access control (RBAC) authorization is Enabled on Kubernetes Engine Clustersalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.4 | Ensure Cluster Check triggered at least once per week for Kubernetes Clustersalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.5 | Ensure Kubernetes web UI / Dashboard is not enabledalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.7 | Ensure Network policy is enabled on Kubernetes Engine Clustersalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.8 | Ensure ENI multiple IP mode support for Kubernetes Clusteralibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-7.9 | Ensure Kubernetes Cluster is created with Private cluster enabledalibaba · Level 1 | alibaba | Medium | 1 | Automated |
| TMA-ALIBABA-8.1 | Ensure that Security Center is Advanced or Enterprise Editionalibaba · Level 2 | alibaba | Medium | 2 | Automated |
| TMA-ALIBABA-8.2 | Ensure that all assets are installed with security agentalibaba · Level 2 | alibaba | Medium | 2 | Automated |
| TMA-ALIBABA-8.3 | Ensure that Automatic Quarantine is enabledalibaba · Level 2 | alibaba | Medium | 2 | Manual review |
| TMA-ALIBABA-8.4 | Ensure that Webshell detection is enabled on all web serversalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-8.5 | Ensure that notification is enabled on all high risk itemsalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-8.6 | Ensure that Config Assessment is granted with privilegealibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-8.7 | Ensure that scheduled vulnerability scan is enabled on all serversalibaba · Level 1 | alibaba | Medium | 1 | Manual review |
| TMA-ALIBABA-8.8 | Ensure that Asset Fingerprint automatically collects asset fingerprint dataalibaba · Level 1 | alibaba | Medium | 1 | Manual review |