TMAegis
vi

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 86 quy tắctrên 16.927Trang 1 / 4

IDTiêu đềMức độ nghiêm trọng
TMA-ALIBABA-1.1Avoid the use of the "root" accountalibaba · Cấp 1Cao
TMA-ALIBABA-1.2Ensure no root account access key existsalibaba · Cấp 1Cao
TMA-ALIBABA-1.3Ensure MFA is enabled for the "root" accountalibaba · Cấp 1Cao
TMA-ALIBABA-1.4Ensure that multi-factor authentication is enabled for all RAM users that have a console passwordalibaba · Cấp 1Cao
TMA-ALIBABA-1.7Ensure RAM password policy requires at least one uppercase letteralibaba · Cấp 1Cao
TMA-ALIBABA-1.8Ensure RAM password policy requires at least one lowercase letteralibaba · Cấp 1Cao
TMA-ALIBABA-1.9Ensure RAM password policy require at least one symbolalibaba · Cấp 1Cao
TMA-ALIBABA-1.10Ensure RAM password policy require at least one numberalibaba · Cấp 1Cao
TMA-ALIBABA-1.11Ensure RAM password policy requires minimum length of 14 or greateralibaba · Cấp 1Cao
TMA-ALIBABA-1.12Ensure RAM password policy prevents password reusealibaba · Cấp 1Cao
TMA-ALIBABA-1.13Ensure RAM password policy expires passwords in 365 days or greateralibaba · Cấp 1Cao
TMA-ALIBABA-1.14Ensure RAM password policy temporarily blocks logon after 5 incorrect logon attempts within an houralibaba · Cấp 1Cao
TMA-ALIBABA-1.15Ensure RAM policies that allow full "*:*" administrative privileges are not createdalibaba · Cấp 1Cao
TMA-ALIBABA-2.2Ensure the OSS used to store ActionTrail logs is not publicly accessiblealibaba · Cấp 1Cao
TMA-ALIBABA-2.17Ensure a log monitoring and alerts are set up for Management Console sign-in without MFAalibaba · Cấp 1Cao
TMA-ALIBABA-2.18Ensure a log monitoring and alerts are set up for usage of "root" accountalibaba · Cấp 1Cao
TMA-ALIBABA-3.2Ensure that SSH access is restricted from the internetalibaba · Cấp 2Cao
TMA-ALIBABA-4.1Ensure that 'Unattached disks' are encryptedalibaba · Cấp 1Cao
TMA-ALIBABA-4.2Ensure that 'Virtual Machine's disk' are encryptedalibaba · Cấp 1Cao
TMA-ALIBABA-4.3Ensure no security groups allow ingress from 0.0.0.0/0 to port 22alibaba · Cấp 1Cao
TMA-ALIBABA-4.4Ensure no security groups allow ingress from 0.0.0.0/0 to port 3389alibaba · Cấp 1Cao
TMA-ALIBABA-5.1Ensure that OSS bucket is not anonymously or publicly accessiblealibaba · Cấp 1Cao
TMA-ALIBABA-5.2Ensure that there are no publicly accessible objects in storage bucketsalibaba · Cấp 1Cao
TMA-ALIBABA-5.7Ensure network access rule for storage bucket is not set to publicly accessiblealibaba · Cấp 2Cao
TMA-ALIBABA-5.8Ensure server-side encryption is set to 'Encrypt with Service Key'alibaba · Cấp 2Cao