TMA-ALIBABA-1.2
Ensure no root account access key exists
Açıklama
Access keys provide programmatic access to a given Alibaba Cloud account. It is recommended that all access keys associated with the root account be removed. An Alibaba Cloud account can be viewed as a "root" account. The root account has the highest privilege of an Alibaba Cloud account. Removing access keys associated with the root account limits the opportunity that the ... Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Perform the following to determine if the root account has access keys: Using the management console: 1. Logon to Resource Access Management (RAM) console https://ram.console.aliyun.com/overview by using your Alibaba Cloud account (root account). 2. In the left-side navigation pane, click Overview. 3. In the Security Check section, make sure that No AK for Root Account is marked as Finished.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Perform the following to delete or disable active root access keys: Using the management console 1. Logon to RAM console by using your Alibaba Cloud account (root account). 2. Move the pointer over the account icon in the upper-right corner and click AccessKey. 3. Click Continue to manage AccessKey. 4. On the Security Management page, find the target access keys and perform the following operations: Click Disable to disable the target access keys temporarily. Click Delete to delete the target access keys permanently.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- alibabaram
- Referans
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 1.2 Ensure no root account access key exists