TMAegis
更多 ibmcloud 规则

TMA-IBMCLOUD-8.1.1.2

Ensure Keys in the IBM Cloud® Key Protect Service are configured for high availability

高级别 1人工审核ibmcloud

说明

IBM® Key Protect for IBM Cloud® is a highly available, regional service with multiple availability zones and automatic features that help keep your applications secure and operational. Within a region high availability is achieved through routing traffic to other availability zones if one zone is down. High Availability across regions can be achieved by two ways. Dynamic cross-region high availability: There are three regions, us-south (located in Dallas, Texas, United States), jp-tok (located in Tokyo, Japan), and eu-de (located in Frankfurt, Germany) where Key Protect has failover support into a separate region where data is replicated into standby infrastructure (fail-over region) if you select the Cross-region plan. This allows your keys are available in another region if the primary region goes down. In the event primary region goes down, your requests are routed to the fail-over...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

To check if a of Key Protect instance is provisioned in one of the cross-regions supported Key Protect Service, complete the following steps. Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. From your IBM Cloud resource list, click on Security select to view all your provisioned Key Protect instances. 4. Click on instance you want to check cross-region high availability 5. Click on the endpoints on the left-hand panel and verify if the region in the endpoint is one of the regions that has cross-region high availability.

修复方式

修复方法: 操作指南或基础设施补丁

To get a list of Key Protect instances from the IBM Cloud console, complete the following steps. Log in to your IBM Cloud account. Using Console: 1. Click Catalog to view the list of services that are available on IBM Cloud. 2. From the All-Categories navigation pane, click the Security and Identity category. 3. From the list of services, click the Key Protect tile. 4. Select a service plan, and click Create to provision an instance of Key Protect in the account, region that has cross-region support, and resource group where you are logged in.

属性

操作系统
任意
标签
cloudcryptoibmcloud
参考
CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.1.1.2 Ensure Keys in the IBM Cloud® Key Protect Service are configured for high availability