TMA-IBMCLOUD-8.2.3
Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events
Descripción
Secrets stored in the Secrets Manager go through life-cycle changes, as an administrator of your Secrets Manager instance, you may want to notify your users, applications through available delivery channels such as email, SMS etc., or through event-driven programming using webhooks. Ensuring all secrets life cycle management is handled on-time to ensure users are not locked out and applications run without disruptions.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. Click on Settings on the left-hand panel to check if event notification is configured for the instance.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. In the Secrets Manager navigation, click Settings. 5. In the Event Notifications section and click Connect. 6. In the side panel, review the source details for the connection. 7. Select the resource group and Event Notifications service instance that you want to connect. 8. To confirm the connection, click `Connect'. 9. A success message is displayed to indicate that Secrets Manager is now connected to Event Notifications. If an IAM authorization between Secrets Manager and Event Notifications doesn't exist in your account, a dialog is displayed. Follow the prompts to grant access between the services. 1. To grant access between Secrets Manager and Event Notifications, click Authorize. 2. In the side panel, select Event Notifications as the target service. 3. From the list of instances, select the Event Notifications service instance that you want to authorize. 4. Select the Event Source Manager role. 5. Click Review. 6. Click Assign.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- cloudibmcloud
- Referencia
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.3 Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events