TDSQL
TMA-TDSQL-5.10
Ensure the OSS API Allowlist Is Configured
中级别 2人工审核tdsql
说明
TDSQL OSS supports an IP allowlist for API callers, restricting management API access to specific IP addresses.
检查方式
审计方法: 人工审核
此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。
Check the allowlist configuration in scheduler.xml: <whitelist ip="..." .../> Confirm the ip field is not empty.
修复方式
修复方法: 操作指南或基础设施补丁
Configure the allowlist IP list (allowing only the management/operations subnets): <whitelist ip="10.0.1.0/24;10.0.2.100" .../>
属性
- 操作系统
- 任意
- 标签
- tdsqlnetworkoss
- 参考
- CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 5.10 Ensure the OSS API Allowlist Is Configured