TMA-IBMCLOUD-1.20
Enable audit logging for IBM Cloud Identity and Access Management
説明
Use the IBM Cloud Activity Tracker with IBM Cloud Logs service to monitor certain IAM events. As a security officer, auditor, or manager, you can use the IBM Cloud Activity Tracker with IBM Cloud Logs service to track how users and applications interact with IBM Cloud Identity and Access Management (IAM). You can use this service to investigate abnormal activity and critical actions and comply with regulatory audit requirements.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. Go to the Menu icon. Then, select Observability to access the Observability dashboard. 3. Select Activity Tracker from the page navigation menu 4. Check that you can see an IBM Cloud Activity Tracker with IBM Cloud Logs instance in Frankfurt and one instance for each location where you operate in the IBM Cloud.
修正方法
修正方法: ガイダンスまたは IaC パッチ
You must create an instance of the IBM Cloud Activity Tracker with IBM Cloud Logs service in the Frankfurt region to start tracking IAM events. Use a minimum of a 7-day event search. Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. Go to the Menu icon. Then, select Observability to access the Observability dashboard. 3. Select Activity Tracker from the page navigation menu 4. Click Create instance to create an instance of IBM Cloud Activity Tracker with IBM Cloud Logs. 5. In the Select a region drop down, choose Frankfurt. 6. Select a pricing plan, service name, resource group, and provide optional tags. Choose a plan that offers a minimum of 7-day event search. 7. Click Create
プロパティ
- オペレーティングシステム
- すべて
- タグ
- access-controlcloudibmcloudlogging
- 参照
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.20 Enable audit logging for IBM Cloud Identity and Access Management