Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
81 rules foundof 11,219Page 3 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-IBMCLOUD-5.1 | Ensure IBM Cloudant encryption is enabled with customer managed keysibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-6.1.2 | Ensure Web application firewall is ENABLED in IBM Cloud Internet Services (CIS)ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.1.3 | Ensure DDoS protection is Active on IBM Cloud Internet Servicesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.2.1 | Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 22ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.2.2 | Ensure the default security group of every VPC restricts all trafficibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.2.3 | Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.2.4 | Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-6.2.5 | Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-7.1.1 | Ensure data in Kubernetes secrets is encrypted using a Key Management Service (KMS) provideribmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-7.1.2 | Ensure TLS 1.2+ for all inbound traffic at IBM Cloud Kubernetes Service Ingressibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-7.1.3 | Ensure IBM Cloud Kubernetes Service worker nodes are updated to the latest version to ensure patching of vulnerabilitiesibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-7.1.4 | Ensure IBM Cloud Kubernetes Service cluster has image pull secrets enabledibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-8.1.1.1 | Ensure IBM Key Protect has automated rotation for customer managed keys enabledibmcloud · Level 2 | ibmcloud | Medium | 2 | Manual review |
| TMA-IBMCLOUD-8.2.1 | Ensure certificates imported into or generated through IBM Cloud® Secrets Manager are automatically renewed before expirationibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.2 | Ensure no workspace security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.3 | Ensure no workspace network security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.4 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any infrastructure portsibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.5 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any administrative portsibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.6 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any fileshare portibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-9.7 | Ensure no workspace network security groups allow inbound traffic from the Internet allowing access from 0.0.0.0/0 to telnet port (23) or RSH port (514)ibmcloud · Level 1 | ibmcloud | Medium | 1 | Manual review |
| TMA-IBMCLOUD-KEY-PROTECT-ROTATION | Ensure Key Protect root keys have a rotation policyibmcloud · Level 1 | ibmcloud | Medium | 1 | Automated |
| TMA-IBMCLOUD-RESTRICT-API-KEY-CREATION | Ensure creation of platform API keys is restrictedibmcloud · Level 2 | ibmcloud | Medium | 2 | Automated |
| TMA-IBMCLOUD-RESTRICT-SERVICE-ID-CREATION | Ensure creation of service IDs is restrictedibmcloud · Level 2 | ibmcloud | Medium | 2 | Automated |
| TMA-IBMCLOUD-VPC-FLOW-LOGS | Ensure Flow Logs are enabled for every VPCibmcloud · Level 2 | ibmcloud | Medium | 2 | Automated |
| TMA-IBMCLOUD-2.1.2 | Ensure network access for Cloud Object Storage is restricted to specific IP rangeibmcloud · Level 2 | ibmcloud | Low | 2 | Manual review |