Ensure Anti-DDoS access and security log service is enabled

中级别 2人工审核alibaba

说明

Alibaba Cloud Anti-DDoS Pro supports integration with Log Service for website access log (including HTTP flood attack logs) to enable the real-time analysis and reporting center features. The log collected can be monitored on a central dashboard on Log Service. By integrating Anti-DDoS access and security log to Log Service, the website access log and flood attack logs can be collected and monitored to enable real-time query and improve the network security. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website. 3. Ensure the Log Collection is turned on. 4. Ensure the log volume usage indicator is sufficient for log storage.

修复方式

修复方法: 操作指南或基础设施补丁

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website for which you want to enable the Full Log service and click to turn on the Status switch.

属性

操作系统: 任意
标签: alibabalogging
参考: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.6 Ensure Anti-DDoS access and security log service is enabled