TMA-GITLAB-1.5.3
Ensure scanners are in place to secure Infrastructure as Code (IaC) instructions
Açıklama
Detect and prevent misconfigurations or insecure instructions in Infrastructure as Code (IaC) files, such as Terraform files. Detecting and fixing misconfigurations and/or insecure instructions in IaC (Infrastructure as Code) files decreases the risk for data leak or data theft. It is important to secure IaC instructions in order to prevent further problems of deployment, exposed assets, or improper configurations, which can ultimately lead to easier ways to attack and steal organization data.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Audit: For every repository that holds IaC instructions files, verify that a scanning tool such as GitLab's Infrastructure as Code scanning is configured to identify and prevent misconfigurations and insecure instructions. 1. On GitLab, navigate to the main page of the repository. 2. Review the CI pipeline configuration to verify that IaC scanning has been enabled on this project.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Remediation: For every repository that holds IaC instructions files, configure GitLab's Infrastructure as Code scanning (or another IaC scanning tool) to identify and prevent misconfigurations and insecure instructions. 1. On GitLab, navigate to the main page of the repository. 2. Enable IaC scanning for this project.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- devsecopsgitlab
- Referans
- CIS GitLab Benchmark v1.0.1 - 1.5.3 Ensure scanners are in place to secure Infrastructure as Code (IaC) instructions