Explorador de regras
Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.
110 regras encontradasde 11.219Página 1 de 5
| ID | Título | Plataforma | Severidade | Nível | Verificação |
|---|---|---|---|---|---|
| TMA-GCP-BIGQUERY-DATASETS-NOT-PUBLIC | Ensure BigQuery datasets are not anonymously or publicly accessiblegcp · Nível 1 | gcp | Crítica | 1 | Automatizada |
| TMA-GCP-CLOUDSQL-NO-OPEN-AUTHORIZED-NETWORKS | Ensure Cloud SQL instances do not allow 0.0.0.0/0 in authorised networksgcp · Nível 1 | gcp | Crítica | 1 | Automatizada |
| TMA-GCP-1.1.1 | Ensure Super Admin Email Address Is Not Tied To A Single Usergcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-1.1.2 | Ensure Super Admin Account Is Not Used For Google Cloud Administrationgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-1.3 | Ensure that Multi-Factor Authentication is 'Enabled' for All Non-Service Accountsgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-1.10 | Ensure That Cloud KMS Cryptokeys Are Not Anonymously or Publicly Accessiblegcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-1.11 | Ensure KMS Encryption Keys Are Rotated Within a Period of 90 Daysgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-2.5 | Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changesgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-2.6 | Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changesgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-2.13 | Ensure That Cloud DNS Logging Is Enabled for All VPC Networksgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-2.14 | Ensure Cloud Asset Inventory Is Enabledgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-4.6 | Ensure That IP Forwarding Is Not Enabled on Instancesgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-5.1 | Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessiblegcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-6.1.1 | Ensure That a MySQL Instance Does Not Allow Anyone To Connect With Administrative Privilegesgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-6.4 | Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSLgcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-7.1 | Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessiblegcp · Nível 1 | gcp | Alta | 1 | Revisão manual |
| TMA-GCP-CLOUDSQL-NO-PUBLIC-IP | Ensure Cloud SQL instances do not have public IPsgcp · Nível 2 | gcp | Alta | 2 | Automatizada |
| TMA-GCP-CLOUDSQL-REQUIRE-SSL | Ensure Cloud SQL instances require all incoming connections to use SSLgcp · Nível 1 | gcp | Alta | 1 | Automatizada |
| TMA-GCP-FIREWALL-NO-RDP-FROM-INTERNET | Ensure RDP access is restricted from the Internetgcp · Nível 2 | gcp | Alta | 2 | Automatizada |
| TMA-GCP-FIREWALL-NO-SSH-FROM-INTERNET | Ensure SSH access is restricted from the Internetgcp · Nível 2 | gcp | Alta | 2 | Automatizada |
| TMA-GCP-NO-DEFAULT-SA-FULL-SCOPE | Ensure instances do not use the default compute service account with full access to all Cloud APIsgcp · Nível 1 | gcp | Alta | 1 | Automatizada |
| TMA-GCP-NO-USER-MANAGED-SA-KEYS | Ensure there are only GCP-managed service account keys for each service accountgcp · Nível 1 | gcp | Alta | 1 | Automatizada |
| TMA-GCP-STORAGE-PUBLIC-ACCESS-PREVENTION | Ensure Cloud Storage buckets enforce public access preventiongcp · Nível 1 | gcp | Alta | 1 | Automatizada |
| TMA-GCP-1.1.3 | Ensure Folders Are Structured By Environment And Sensitivitygcp · Nível 2 | gcp | Média | 2 | Revisão manual |
| TMA-GCP-1.1.4 | Ensure Organization Policies Are Configured For Centralized Constraintsgcp · Nível 2 | gcp | Média | 2 | Revisão manual |