Kural gezgini
Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.
81 kural bulundu/ 16.927Sayfa 3 / 4
| Kimlik | Başlık | Platform | Önem derecesi | Düzey | Denetim |
|---|---|---|---|---|---|
| TMA-IBMCLOUD-5.1 | Ensure IBM Cloudant encryption is enabled with customer managed keysibmcloud · Düzey 2 | ibmcloud | Orta | 2 | Manuel inceleme |
| TMA-IBMCLOUD-6.1.2 | Ensure Web application firewall is ENABLED in IBM Cloud Internet Services (CIS)ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.1.3 | Ensure DDoS protection is Active on IBM Cloud Internet Servicesibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.2.1 | Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 22ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.2.2 | Ensure the default security group of every VPC restricts all trafficibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.2.3 | Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.2.4 | Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-6.2.5 | Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-7.1.1 | Ensure data in Kubernetes secrets is encrypted using a Key Management Service (KMS) provideribmcloud · Düzey 2 | ibmcloud | Orta | 2 | Manuel inceleme |
| TMA-IBMCLOUD-7.1.2 | Ensure TLS 1.2+ for all inbound traffic at IBM Cloud Kubernetes Service Ingressibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-7.1.3 | Ensure IBM Cloud Kubernetes Service worker nodes are updated to the latest version to ensure patching of vulnerabilitiesibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-7.1.4 | Ensure IBM Cloud Kubernetes Service cluster has image pull secrets enabledibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-8.1.1.1 | Ensure IBM Key Protect has automated rotation for customer managed keys enabledibmcloud · Düzey 2 | ibmcloud | Orta | 2 | Manuel inceleme |
| TMA-IBMCLOUD-8.2.1 | Ensure certificates imported into or generated through IBM Cloud® Secrets Manager are automatically renewed before expirationibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.2 | Ensure no workspace security groups allow ingress from 0.0.0.0/0 to port 3389ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.3 | Ensure no workspace network security groups allow ingress from 0.0.0.0/0 to port 22ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.4 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any infrastructure portsibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.5 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any administrative portsibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.6 | Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any fileshare portibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-9.7 | Ensure no workspace network security groups allow inbound traffic from the Internet allowing access from 0.0.0.0/0 to telnet port (23) or RSH port (514)ibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Manuel inceleme |
| TMA-IBMCLOUD-KEY-PROTECT-ROTATION | Ensure Key Protect root keys have a rotation policyibmcloud · Düzey 1 | ibmcloud | Orta | 1 | Otomatik |
| TMA-IBMCLOUD-RESTRICT-API-KEY-CREATION | Ensure creation of platform API keys is restrictedibmcloud · Düzey 2 | ibmcloud | Orta | 2 | Otomatik |
| TMA-IBMCLOUD-RESTRICT-SERVICE-ID-CREATION | Ensure creation of service IDs is restrictedibmcloud · Düzey 2 | ibmcloud | Orta | 2 | Otomatik |
| TMA-IBMCLOUD-VPC-FLOW-LOGS | Ensure Flow Logs are enabled for every VPCibmcloud · Düzey 2 | ibmcloud | Orta | 2 | Otomatik |
| TMA-IBMCLOUD-2.1.2 | Ensure network access for Cloud Object Storage is restricted to specific IP rangeibmcloud · Düzey 2 | ibmcloud | Düşük | 2 | Manuel inceleme |