TMA-OCI-1.11
Ensure user IAM Database Passwords rotate within 90 days
설명
Users can create and manage their database password in their IAM user profile and use that password to authenticate to databases in their tenancy. An IAM database password is a different password than an OCI Console password. It is important to secure and rotate an IAM Database password 90 days or less as it provides the same access the user would have a using a local database user. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
From Console: 1. Login to OCI Console. 2. Select Identity & Security from the Services menu. 3. Select Users from the Identity menu. 4. Click on an individual user under the Name heading. 5. Click on Database Passwords in the lower left-hand corner of the page. 6. Ensure the date of the Database Passwords under the Created column of the Database Passwords is no more than 90 days 7. Login to OCI Console. 8. Select Identity & Security from the Services menu. 9. Select Domains from the Identity menu. 10. For each domain listed, click on the name and select Users. 11.
조치 방법
조치 방식: 가이드 또는 인프라 패치
OCI IAM with Identity Domains From Console: 1. Login to OCI Console. 2. Select Identity & Security from the Services menu. 3. Select Domains from the Identity menu. 4. For each domain listed, click on the name and select Users. 5. Click on an individual user under the Username heading. 6. Click on IAM Database Passwords in the lower left-hand corner of the page. 7. Delete any Database Passwords with a date older than 90 days under the Created column of the Database Passwords.
속성
- 운영 체제
- 모두
- 태그
- ociiam
- 참고 자료
- CIS Oracle Cloud Infrastructure Foundations Benchmark v3.1.1 - 1.11 Ensure user IAM Database Passwords rotate within 90 days