TDSQL
TMA-TDSQL-5.10
Ensure the OSS API Allowlist Is Configured
中等級 2人工審核tdsql
說明
TDSQL OSS supports an IP allowlist for API callers, restricting management API access to specific IP addresses.
檢查方式
稽核方法: 人工審核
此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。
Check the allowlist configuration in scheduler.xml: <whitelist ip="..." .../> Confirm the ip field is not empty.
修補方式
修補方法: 操作指南或基礎設施修補檔
Configure the allowlist IP list (allowing only the management/operations subnets): <whitelist ip="10.0.1.0/24;10.0.2.100" .../>
屬性
- 作業系統
- 不限
- 標籤
- tdsqlnetworkoss
- 參考資料
- CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 5.10 Ensure the OSS API Allowlist Is Configured