Ensure access settings to secrets follow least privilege rule and allow access for a limited time to applications and non- administrative users as needed

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Manage, Access (IAM) and assign access to your Secrets Manager instance: a. Create an access group for the users and service IDs that you want to give access to and add those users to the access group in IAM. For example, you might have a group of security admins that might need the same level of access. b. After you create an access group and add users, go to Manage, Access (IAM), Access Groups. c. Select a table row and click the Actions menu to open a list of options for that access group. d. Click Assign Access. e. From the list of services, select Secrets Manager and click Next. f. In the Resources section, select Specific resources. Choose a region and Secrets Manager service instance. Then, click Next. If you choose not to provide a specific instance, access is assigned for all instances of the service within the region that you selected. If you choose not to select a region, access is granted for all instances of the service in your account. Choose a combination of platform and service access roles to assign access for access group. g. Review your selections and click Add. h. Click Assign. i. Now you can add us...

조치 방법

조치 방식: 가이드 또는 인프라 패치

Using Console: Remove a user from an Access Group 1. Log in to the IBM Cloud® console. 2. Go to Manage, Access (IAM), Access Groups a. Select your Access Group and click the Actions menu to open a list of options for that access group. b. Click Manage group. c. Select the user you would like to remove and click the Actions menu to remove it.