Ensure secrets stored in the IBM Cloud® Secrets Manager are rotated periodically

FaibleNiveau 2Revue manuelleibmcloud

Description

As you use Secrets Manager to design your secrets management strategy, consider how often you want to rotate your secrets based on the internal guidelines for your organization. Determine ahead of time which users or service IDs require access to rotate secrets, and how those secrets can be rotated to avoid interruptions to your applications. By scheduling automatic rotation of secrets at regular intervals, you reduce the likelihood of compromised credentials. When it's time to rotate the secret based on the rotation interval that you specify, Secrets Manager automatically creates a new version of your secret. You can safely delete old version of the secrets only after their newest versions are fully deployed to your applications. If any secrets are in use, you can use Secrets Manager LOCK feature to lock the secrets from getting deleted. Rotating secrets enables to meet your internal...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to view 4. In the Secrets table, click the Actions menu to open a list of options for your secret 5. To view the secret value, click View Secret 6. Click Confirm after you ensure that you are in a safe environment 7. To retrieve a secret’s details such as rotation interval or state; In the Secrets table, click the Actions menu, to open a list of options for your secret 8. To view the secret value, click Details.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. If you're adding a secret, enable the rotation option. 5. If you're editing an existing secret, enable automatic rotation by updating its details. 6. In the Secrets table, view a list of your existing secrets. 7. In the row for the secret that you want to edit, click the Actions menu, Edit details 8. Use the Automatic rotation option to enable or disable automatic rotation for the secret.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: cloudibmcloud
Référence: CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.4 Ensure secrets stored in the IBM Cloud® Secrets Manager are rotated periodically