Kural gezgini
Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.
110 kural bulundu/ 11.219Sayfa 1 / 5
| Kimlik | Başlık | Platform | Önem derecesi | Düzey | Denetim |
|---|---|---|---|---|---|
| TMA-GCP-BIGQUERY-DATASETS-NOT-PUBLIC | Ensure BigQuery datasets are not anonymously or publicly accessiblegcp · Düzey 1 | gcp | Kritik | 1 | Otomatik |
| TMA-GCP-CLOUDSQL-NO-OPEN-AUTHORIZED-NETWORKS | Ensure Cloud SQL instances do not allow 0.0.0.0/0 in authorised networksgcp · Düzey 1 | gcp | Kritik | 1 | Otomatik |
| TMA-GCP-1.1.1 | Ensure Super Admin Email Address Is Not Tied To A Single Usergcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-1.1.2 | Ensure Super Admin Account Is Not Used For Google Cloud Administrationgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-1.3 | Ensure that Multi-Factor Authentication is 'Enabled' for All Non-Service Accountsgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-1.10 | Ensure That Cloud KMS Cryptokeys Are Not Anonymously or Publicly Accessiblegcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-1.11 | Ensure KMS Encryption Keys Are Rotated Within a Period of 90 Daysgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-2.5 | Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changesgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-2.6 | Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changesgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-2.13 | Ensure That Cloud DNS Logging Is Enabled for All VPC Networksgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-2.14 | Ensure Cloud Asset Inventory Is Enabledgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-4.6 | Ensure That IP Forwarding Is Not Enabled on Instancesgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-5.1 | Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessiblegcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-6.1.1 | Ensure That a MySQL Instance Does Not Allow Anyone To Connect With Administrative Privilegesgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-6.4 | Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSLgcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-7.1 | Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessiblegcp · Düzey 1 | gcp | Yüksek | 1 | Manuel inceleme |
| TMA-GCP-CLOUDSQL-NO-PUBLIC-IP | Ensure Cloud SQL instances do not have public IPsgcp · Düzey 2 | gcp | Yüksek | 2 | Otomatik |
| TMA-GCP-CLOUDSQL-REQUIRE-SSL | Ensure Cloud SQL instances require all incoming connections to use SSLgcp · Düzey 1 | gcp | Yüksek | 1 | Otomatik |
| TMA-GCP-FIREWALL-NO-RDP-FROM-INTERNET | Ensure RDP access is restricted from the Internetgcp · Düzey 2 | gcp | Yüksek | 2 | Otomatik |
| TMA-GCP-FIREWALL-NO-SSH-FROM-INTERNET | Ensure SSH access is restricted from the Internetgcp · Düzey 2 | gcp | Yüksek | 2 | Otomatik |
| TMA-GCP-NO-DEFAULT-SA-FULL-SCOPE | Ensure instances do not use the default compute service account with full access to all Cloud APIsgcp · Düzey 1 | gcp | Yüksek | 1 | Otomatik |
| TMA-GCP-NO-USER-MANAGED-SA-KEYS | Ensure there are only GCP-managed service account keys for each service accountgcp · Düzey 1 | gcp | Yüksek | 1 | Otomatik |
| TMA-GCP-STORAGE-PUBLIC-ACCESS-PREVENTION | Ensure Cloud Storage buckets enforce public access preventiongcp · Düzey 1 | gcp | Yüksek | 1 | Otomatik |
| TMA-GCP-1.1.3 | Ensure Folders Are Structured By Environment And Sensitivitygcp · Düzey 2 | gcp | Orta | 2 | Manuel inceleme |
| TMA-GCP-1.1.4 | Ensure Organization Policies Are Configured For Centralized Constraintsgcp · Düzey 2 | gcp | Orta | 2 | Manuel inceleme |