Ensure secrets stored in the IBM Cloud® Secrets Manager are rotated periodically

低等級 2人工審核ibmcloud

說明

As you use Secrets Manager to design your secrets management strategy, consider how often you want to rotate your secrets based on the internal guidelines for your organization. Determine ahead of time which users or service IDs require access to rotate secrets, and how those secrets can be rotated to avoid interruptions to your applications. By scheduling automatic rotation of secrets at regular intervals, you reduce the likelihood of compromised credentials. When it's time to rotate the secret based on the rotation interval that you specify, Secrets Manager automatically creates a new version of your secret. You can safely delete old version of the secrets only after their newest versions are fully deployed to your applications. If any secrets are in use, you can use Secrets Manager LOCK feature to lock the secrets from getting deleted. Rotating secrets enables to meet your internal...

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to view 4. In the Secrets table, click the Actions menu to open a list of options for your secret 5. To view the secret value, click View Secret 6. Click Confirm after you ensure that you are in a safe environment 7. To retrieve a secret’s details such as rotation interval or state; In the Secrets table, click the Actions menu, to open a list of options for your secret 8. To view the secret value, click Details.

修補方式

修補方法: 操作指南或基礎設施修補檔

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. If you're adding a secret, enable the rotation option. 5. If you're editing an existing secret, enable automatic rotation by updating its details. 6. In the Secrets table, view a list of your existing secrets. 7. In the row for the secret that you want to edit, click the Actions menu, Edit details 8. Use the Automatic rotation option to enable or disable automatic rotation for the secret.

屬性

作業系統: 不限
標籤: cloudibmcloud
參考資料: CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.4 Ensure secrets stored in the IBM Cloud® Secrets Manager are rotated periodically