Ensure Oracle Analytics Cloud (OAC) access is restricted to allowed sources or deployed within a Virtual Cloud Network.

中级别 1人工审核oci

说明

Oracle Analytics Cloud (OAC) is a scalable and secure public cloud service that provides a full set of capabilities to explore and perform collaborative analytics for you, your workgroup, and your enterprise. Restricting connectivity to Oracle Analytics Cloud instances reduces an OAC instance's exposure to risk. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

From Console: 1 Login into the OCI Console 2. Click in the search bar, top of the screen. 3. Type Advanced Resource Query and hit enter. 4. Click the Advanced Resource Query button in the upper right of the screen. 5. Enter the following query in the query box: query analyticsinstance resources 6. For each OAC Instance returned click on the link under Display name. 7. Ensure Access Control Rules IP Address/CIDR Block as well as Virtual Cloud Networks are correct. 8. Repeat for other subscribed regions. From CLI: 1.

修复方式

修复方法: 操作指南或基础设施补丁

From Console: 1. Follow the audit procedure above. 2. For each OAC instance in the returned results, click the OAC Instance name 3. Click Edit next to Access Control Rules 4. Click +Another Rule and add rules as required From CLI: 1. Follow the audit procedure. 2. Get the json input format by executing the below command: oci analytics analytics-instance change-network-endpoint --generate-full-command-json-input 3. For each of the OAC Instances identified get its details. 4.

属性

操作系统: 任意
标签: ocinetwork
参考: CIS Oracle Cloud Infrastructure Foundations Benchmark v3.1.1 - 2.7 Ensure Oracle Analytics Cloud (OAC) access is restricted to allowed sources or deployed within a Virtual Cloud Network.