Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
81 rules foundof 11,219Page 2 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-IBMCLOUD-1.10 | Ensure contact phone number is validibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.11 | Ensure Trusted Profiles are used in place of ServiceIDs wherever feasibleibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.13 | Ensure limitations on External Identity Interactions are Enabledibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.14 | Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profilesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.15 | Ensure a support access group has been created to manage incidents with IBM Supportibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.16 | Ensure Minimal Number of Users are Granted Administrative Privilegesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.17 | Ensure Minimal Number of Service IDs are Granted Administrative Privilegesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.19 | Ensure Inactive User Accounts are Suspendibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-1.20 | Enable audit logging for IBM Cloud Identity and Access Managementibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-2.1.1.1 | Ensure Cloud Object Storage encryption is done with customer managed keysibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.1.1.2 | Ensure Cloud Object Storage Encryption is set to On with BYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.1.1.3 | Ensure Cloud Object Storage Encryption is set to On with KYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.1.3 | Ensure network access for Cloud Object Storage is set to be exposed only on Private end-pointsibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-2.1.4 | Ensure Cloud Object Storage bucket access is restricted by using IAM and S3 access controlibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-2.2.1.1 | Ensure IBM Cloud® Block Storage for Virtual Private Cloud is encrypted with BYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.1.2 | Ensure IBM Cloud® Block Storage for Virtual Private Cloud is encrypted with KYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.2.2 | Ensure IBM Cloud® File Storage for Virtual Private Cloud is encrypted with BYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.2.3 | Ensure IBM Cloud® File Storage for Virtual Private Cloud is encrypted with KYOKibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.3 | Ensure boot volumes are encrypted with Customer managed keysibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.4 | Ensure secondary volumes are encrypted with customer managed keysibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-2.2.5 | Ensure unattached volumes are encrypted with customer managed keysibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-3.3 | Ensure that events are collected and processed to identify anomalies or abnormal eventsibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-3.5 | Ensure the account owner can login only from a list of authorized countries/IP rangesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-3.6 | Ensure Activity Tracker data is encrypted at restibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-4.2 | Ensure network access to IBM Cloud Databases service is set to be exposed on “Private end points only”ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |