TMAegisBeta
vi

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 16.927 quy tắcTrang 14 / 678

IDTiêu đềMức độ nghiêm trọng
TMA-ALIBABA-1.13Ensure RAM password policy expires passwords in 365 days or greateralibaba · Cấp 1Cao
TMA-ALIBABA-1.14Ensure RAM password policy temporarily blocks logon after 5 incorrect logon attempts within an houralibaba · Cấp 1Cao
TMA-ALIBABA-1.15Ensure RAM policies that allow full "*:*" administrative privileges are not createdalibaba · Cấp 1Cao
TMA-ALIBABA-2.2Ensure the OSS used to store ActionTrail logs is not publicly accessiblealibaba · Cấp 1Cao
TMA-ALIBABA-2.17Ensure a log monitoring and alerts are set up for Management Console sign-in without MFAalibaba · Cấp 1Cao
TMA-ALIBABA-2.18Ensure a log monitoring and alerts are set up for usage of "root" accountalibaba · Cấp 1Cao
TMA-ALIBABA-3.2Ensure that SSH access is restricted from the internetalibaba · Cấp 2Cao
TMA-ALIBABA-4.1Ensure that 'Unattached disks' are encryptedalibaba · Cấp 1Cao
TMA-ALIBABA-4.2Ensure that 'Virtual Machine's disk' are encryptedalibaba · Cấp 1Cao
TMA-ALIBABA-4.3Ensure no security groups allow ingress from 0.0.0.0/0 to port 22alibaba · Cấp 1Cao
TMA-ALIBABA-4.4Ensure no security groups allow ingress from 0.0.0.0/0 to port 3389alibaba · Cấp 1Cao
TMA-ALIBABA-5.1Ensure that OSS bucket is not anonymously or publicly accessiblealibaba · Cấp 1Cao
TMA-ALIBABA-5.2Ensure that there are no publicly accessible objects in storage bucketsalibaba · Cấp 1Cao
TMA-ALIBABA-5.7Ensure network access rule for storage bucket is not set to publicly accessiblealibaba · Cấp 2Cao
TMA-ALIBABA-5.8Ensure server-side encryption is set to 'Encrypt with Service Key'alibaba · Cấp 2Cao
TMA-ALIBABA-5.9Ensure server-side encryption is set to 'Encrypt with BYOK'alibaba · Cấp 2Cao
TMA-ALIBABA-6.1Ensure that RDS instance requires all incoming connections to use SSLalibaba · Cấp 1Cao
TMA-ALIBABA-6.2Ensure that RDS Instances are not open to the worldalibaba · Cấp 1Cao
TMA-ALIBABA-6.6Ensure RDS instance TDE protector is encrypted with BYOK (Use your own key)alibaba · Cấp 2Cao
TMA-ALIBABA-7.6Ensure Basic Authentication is not enabled on Kubernetes Engine Clustersalibaba · Cấp 1Cao
TMA-ALIBABA-1.5Ensure users not logged on for 90 days or longer are disabled for console logonalibaba · Cấp 1Trung bình
TMA-ALIBABA-1.6Ensure access keys are rotated every 90 days or lessalibaba · Cấp 1Trung bình
TMA-ALIBABA-1.16Ensure RAM policies are attached only to groups or rolesalibaba · Cấp 1Trung bình
TMA-ALIBABA-2.1Ensure that ActionTrail are configured to export copies of all Log entriesalibaba · Cấp 1Trung bình
TMA-ALIBABA-2.3Ensure audit logs for multiple cloud resources are integrated with Log Servicealibaba · Cấp 1Trung bình