TMAegis
ibmcloud のその他のルール

TMA-IBMCLOUD-8.2.3

Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events

低レベル 2手動レビューibmcloud

説明

Secrets stored in the Secrets Manager go through life-cycle changes, as an administrator of your Secrets Manager instance, you may want to notify your users, applications through available delivery channels such as email, SMS etc., or through event-driven programming using webhooks. Ensuring all secrets life cycle management is handled on-time to ensure users are not locked out and applications run without disruptions.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. Click on Settings on the left-hand panel to check if event notification is configured for the instance.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. In the Secrets Manager navigation, click Settings. 5. In the Event Notifications section and click Connect. 6. In the side panel, review the source details for the connection. 7. Select the resource group and Event Notifications service instance that you want to connect. 8. To confirm the connection, click `Connect'. 9. A success message is displayed to indicate that Secrets Manager is now connected to Event Notifications. If an IAM authorization between Secrets Manager and Event Notifications doesn't exist in your account, a dialog is displayed. Follow the prompts to grant access between the services. 1. To grant access between Secrets Manager and Event Notifications, click Authorize. 2. In the side panel, select Event Notifications as the target service. 3. From the list of instances, select the Event Notifications service instance that you want to authorize. 4. Select the Event Source Manager role. 5. Click Review. 6. Click Assign.

プロパティ

オペレーティングシステム
すべて
タグ
cloudibmcloud
参照
CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.3 Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events