Ensure Anti-DDoS access and security log service is enabled

中レベル 2手動レビューalibaba

説明

Alibaba Cloud Anti-DDoS Pro supports integration with Log Service for website access log (including HTTP flood attack logs) to enable the real-time analysis and reporting center features. The log collected can be monitored on a central dashboard on Log Service. By integrating Anti-DDoS access and security log to Log Service, the website access log and flood attack logs can be collected and monitored to enable real-time query and improve the network security. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website. 3. Ensure the Log Collection is turned on. 4. Ensure the log volume usage indicator is sufficient for log storage.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website for which you want to enable the Full Log service and click to turn on the Status switch.

プロパティ

オペレーティングシステム: すべて
タグ: alibabalogging
参照: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.6 Ensure Anti-DDoS access and security log service is enabled