TMA-GITHUB-5.2.3
Ensure access to production environment is limited
Описание
Restrict access to the production environment to a few trusted and qualified users only. The production environment is an extremely sensitive one. It directly affects the customer experience and trust in a product, which has serious effects on the organization itself. Reported as a manual review item: no reliable read-only gh api check exists for this control.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify that the production environment is accessible only to trusted and qualified users. Expected state: Restrict access to the production environment to trusted and qualified users.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Restrict access to the production environment to trusted and qualified users.
Свойства
- Операционные системы
- Любая
- Теги
- githubdeployment
- Источник
- CIS GitHub Benchmark v1.2.0 - 5.2.3 Ensure access to production environment is limited