Pure Storage FlashArray
TMA-FLASHARRAY-4.6
Ensure a snapshot offload target using HTTPS is configured when no array connection is available
Opis
FlashArray allows for connections to be created between a FlashArray and a generic offload target. Offload targets allow snapshots to be stored externally to the array, with storage and transmission of proprietary-format snapshots via standardized 3rd party protocols. Offload targets can either utilize the S3 data format, such as Amazon AWS, or the Azure blob format. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).
Kako se proverava
Metod provere: Ručni pregled
From the CLI: ; Run the command pureoffload list to display all connected offload targets and their general statuses. ; Run pureoffload s3 list or pureoffload azure list to display detailed connection settings. ; Review the output to ensure the connection exists and that any defined URI uses the https:// protocol rather than http://.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
To align with the security recommendations, establish an offload target to act as a secondary backup repository and ensure secure transmission by enforcing HTTPS for any custom endpoints. From the GUI: ; Navigate to Protection > Array. ; In the Offload Targets panel, click the + (connect) icon. ; In the Connect Offload Target window, select the Protocol (s3 or azure). ; For Azure Blob: Type a target Name, the Microsoft Azure Account name, the Container name, and the Secret Access Key. ; For S3: Type a target Name, the AWS Access Key ID, the Bucket name, and the Secret Access Key. ; If a custom endpoint/URI is required, ensure it begins with https://.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- flasharraystoragedata-protection
- Referenca
- CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.6 Ensure a snapshot offload target using HTTPS is configured when no array connection is available