TMAegis
Más reglas para ibmcloud

TMA-IBMCLOUD-8.2.3

Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events

BajaNivel 2Revisión manualibmcloud

Descripción

Secrets stored in the Secrets Manager go through life-cycle changes, as an administrator of your Secrets Manager instance, you may want to notify your users, applications through available delivery channels such as email, SMS etc., or through event-driven programming using webhooks. Ensuring all secrets life cycle management is handled on-time to ensure users are not locked out and applications run without disruptions.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. Click on Settings on the left-hand panel to check if event notification is configured for the instance.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. In the Secrets Manager navigation, click Settings. 5. In the Event Notifications section and click Connect. 6. In the side panel, review the source details for the connection. 7. Select the resource group and Event Notifications service instance that you want to connect. 8. To confirm the connection, click `Connect'. 9. A success message is displayed to indicate that Secrets Manager is now connected to Event Notifications. If an IAM authorization between Secrets Manager and Event Notifications doesn't exist in your account, a dialog is displayed. Follow the prompts to grant access between the services. 1. To grant access between Secrets Manager and Event Notifications, click Authorize. 2. In the side panel, select Event Notifications as the target service. 3. From the list of instances, select the Event Notifications service instance that you want to authorize. 4. Select the Event Source Manager role. 5. Click Review. 6. Click Assign.

Propiedades

Sistemas operativos
Cualquiera
Etiquetas
cloudibmcloud
Referencia
CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.3 Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events