Alibaba Cloud
TMA-ALIBABA-6.5
Ensure that 'TDE' is set to 'Enabled' on for applicable database instance
說明
Enable Transparent Data Encryption on every RDS instance. RDS Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database, associated backups, and log files at rest without ... Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
檢查方式
稽核方法: 人工審核
Using the management console: 1. Logon to RDS Console. 2. In the upper-left corner, select the region of the target instance. 3. Locate the target instance, and click the instance ID. 4. In the left-side navigation pane, click Data Security to go to the Security page. 5. Click the TDE tab. 6. Check the button TDE Status is Enabled.
修補方式
修補方法: 操作指南或基礎設施修補檔
Using the management console: 1. Logon to RDS Console. 2. In the upper-left corner, select the region of the target instance. 3. Locate the target instance, and click the instance ID to enter the Basic Information page. 4. In the left-side navigation pane, click Data Security to go to the Security page. 5. Click the TDE tab. 6. On the TDE tab, find TDE Status and click the switch next to Disabled. 7. In the displayed dialog box, choose automatically generated key or custom key, click Confirm. Encrypt a table a. For RDS for MySQL, connect to the instance and run the following command to encrypt tables. alter table <tablename> engine=innodb, block_format=encrypted b.
屬性
- 作業系統
- 不限
- 標籤
- alibabards
- 參考資料
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 6.5 Ensure that 'TDE' is set to 'Enabled' on for applicable database instance