Alibaba Cloud
TMA-ALIBABA-6.5
Ensure that 'TDE' is set to 'Enabled' on for applicable database instance
説明
Enable Transparent Data Encryption on every RDS instance. RDS Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database, associated backups, and log files at rest without ... Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
チェック方法
監査方法: 手動レビュー
Using the management console: 1. Logon to RDS Console. 2. In the upper-left corner, select the region of the target instance. 3. Locate the target instance, and click the instance ID. 4. In the left-side navigation pane, click Data Security to go to the Security page. 5. Click the TDE tab. 6. Check the button TDE Status is Enabled.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Using the management console: 1. Logon to RDS Console. 2. In the upper-left corner, select the region of the target instance. 3. Locate the target instance, and click the instance ID to enter the Basic Information page. 4. In the left-side navigation pane, click Data Security to go to the Security page. 5. Click the TDE tab. 6. On the TDE tab, find TDE Status and click the switch next to Disabled. 7. In the displayed dialog box, choose automatically generated key or custom key, click Confirm. Encrypt a table a. For RDS for MySQL, connect to the instance and run the following command to encrypt tables. alter table <tablename> engine=innodb, block_format=encrypted b.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- alibabards
- 参照
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 6.5 Ensure that 'TDE' is set to 'Enabled' on for applicable database instance