TMA-ALIBABA-1.3
Ensure MFA is enabled for the "root" account
Opis
With MFA enabled, anytime the "root" account logs on to Alibaba Cloud, it will be prompted for username and password followed by an authentication code from the virtual MFA device. It is recommended that MFA be enabled for the "root" user. It is important to prevent "root" account from being compromised. Enabling MFA requires the "root" account holder to provide additional information on top of username and password. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Perform the following to determine if an MFA device is enabled for the "root" account: Using the management console: 1. Logon to RAM console by using your Alibaba Cloud account (root account). 2. In the left-side navigation pane, click Overview. 3. In the Security Check section, make sure that Enable MFA for Root Account is marked as Finished.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Perform the following to enable MFA for "root" account Using the management console: 1. Logon to RAM console by using your Alibaba Cloud account (root account). 2. Move the pointer over the account icon in the upper-right corner and click Security Settings. 3. In the Account Protection section, Click Edit. 4. On the displayed page, select a scenario and select TOTP. 5. Click Submit. 6. On the displayed page, click Verify now. 7. Enter the verification code and click Submit. 8. Download and install a mobile application that supports TOTP MFA, such as Google Authenticator, on your mobile phone. Note: If you already installed Google Authenticator, click Next.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- alibabaram
- Referenca
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 1.3 Ensure MFA is enabled for the "root" account