配置审计 CONFIG-适用于金融行业的合规实践

时间:2023-12-01 17:51:49

适用于金融行业的合规实践

该示例模板包含以下合规规则:

  • access-keys-rotated
  • as-group-elb-healthcheck-required
  • css-cluster-https-required
  • css-cluster-in-vpc
  • cts-kms-encrypted-check
  • cts-lts-enable
  • cts-obs-bucket-track
  • cts-support-validate-check
  • cts-tracker-exists
  • ecs-instance-in-vpc
  • ecs-instance-no-public-ip
  • eip-unbound-check
  • elb-tls-https-listeners-only
  • function-graph-concurrency-check
  • iam-group-has-users-check
  • iam-password-policy
  • iam-root-access-key-check
  • iam-user-group-membership-check
  • iam-user-last-login-check
  • iam-user-mfa-enabled
  • kms-rotation-enabled
  • mfa-enabled-for-iam-console-access
  • mrs-cluster-in-vpc
  • mrs-cluster-kerberos-enabled
  • mrs-cluster-no-public-ip
  • private-nat-gateway-authorized-vpc-only
  • rds-instance-multi-az-support
  • rds-instance-no-public-ip
  • root-account-mfa-enabled
  • stopped-ecs-date-diff
  • volume-unused-check
  • volumes-encrypted-check
  • vpc-acl-unused-check
  • vpc-flow-logs-enabled
  • vpc-sg-ports-check
  • vpn-connections-active (vpnaas.vpnConnections)
  • vpn-connections-active (vpnaas.ipsec-site-connections)
  • waf-instance-policy-not-empty
support.huaweicloud.com/usermanual-rms/rms_13_6003.html