TMAegis

Explorador de regras

Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.

110 regras encontradasde 11.219Página 2 de 5

IDTítuloSeveridade
TMA-GCP-1.2Ensure that Corporate Login Credentials are Usedgcp · Nível 1Média
TMA-GCP-1.4Ensure that Security Key Enforcement is Enabled for All Admin Accountsgcp · Nível 2Média
TMA-GCP-1.5Ensure That There Are Only GCP-Managed Service Account Keys for Each Service Accountgcp · Nível 1Média
TMA-GCP-1.6Ensure That Service Account Has No Admin Privilegesgcp · Nível 1Média
TMA-GCP-1.7Ensure That IAM Users Are Not Assigned the Service Account User or Service Account Token Creator Roles at Project Levelgcp · Nível 1Média
TMA-GCP-1.8Ensure User-Managed/External Keys for Service Accounts Are Rotated Every 90 Days or Fewergcp · Nível 1Média
TMA-GCP-1.9Ensure That Separation of Duties Is Enforced While Assigning Service Account Related Roles to Usersgcp · Nível 2Média
TMA-GCP-1.12Ensure That Separation of Duties Is Enforced While Assigning KMS Related Roles to Usersgcp · Nível 2Média
TMA-GCP-1.17Ensure Essential Contacts is Configured for Organizationgcp · Nível 1Média
TMA-GCP-1.18Ensure Secrets are Not Stored in Cloud Functions Environment Variables by Using Secret Managergcp · Nível 1Média
TMA-GCP-2.1Ensure That Cloud Audit Logging Is Configured Properlygcp · Nível 1Média
TMA-GCP-2.2Ensure Google Workspace/Cloud Identity Data Sharing with Google Cloud is Enabled for Admin Audit Logginggcp · Nível 1Média
TMA-GCP-2.3Ensure That Sinks Are Configured for All Log Entriesgcp · Nível 1Média
TMA-GCP-2.7Ensure That the Log Metric Filter and Alerts Exist for Custom Role Changesgcp · Nível 1Média
TMA-GCP-2.15Ensure 'Access Transparency' is 'Enabled'gcp · Nível 2Média
TMA-GCP-3.2Ensure Legacy Networks Do Not Exist for Older Projectsgcp · Nível 1Média
TMA-GCP-3.3Ensure That DNSSEC Is Enabled for Cloud DNSgcp · Nível 1Média
TMA-GCP-3.4Ensure That RSASHA1 Is Not Used for the Key-Signing Key in Cloud DNS DNSSECgcp · Nível 1Média
TMA-GCP-3.5Ensure That RSASHA1 Is Not Used for the Zone-Signing Key in Cloud DNS DNSSECgcp · Nível 1Média
TMA-GCP-3.6Ensure That SSH Access Is Restricted From the Internetgcp · Nível 2Média
TMA-GCP-3.7Ensure That RDP Access Is Restricted From the Internetgcp · Nível 2Média
TMA-GCP-3.8Ensure VPC Service Controls Is Enabled for Supported Google Cloud Servicesgcp · Nível 2Média
TMA-GCP-3.9Ensure Private Service Connect is Used for Access to Google APIsgcp · Nível 2Média
TMA-GCP-3.11Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suitesgcp · Nível 1Média
TMA-GCP-4.1Ensure That Instances Are Not Configured To Use the Default Service Accountgcp · Nível 1Média