Best Practice Pack

ID: pack:aliyun:best-practice

Description

Directory roll-up of Alibaba Cloud best-practice packs, covering naming, tagging, template metadata, architecture, database, cache, storage, security, and resilience checks.

Included Rules

• rule:aliyun:ack-cluster-encryption-enabled
• rule:aliyun:ack-cluster-supported-version
• rule:aliyun:ack-cluster-upgrade-latest-version
• rule:aliyun:alb-loadbalancer-name-required
• rule:aliyun:cr-instance-multi-zone
• rule:aliyun:cr-repository-immutablity-enable
• rule:aliyun:ecs-disk-auto-snapshot-policy
• rule:aliyun:ecs-disk-encrypted
• rule:aliyun:ecs-instance-image-expired-check
• rule:aliyun:ecs-instance-name-required
• rule:aliyun:ecs-instance-not-bind-key-pair
• rule:aliyun:ecs-instance-ram-role-attached
• rule:aliyun:ecs-instance-tags-required
• rule:aliyun:ecs-security-group-description-required
• rule:aliyun:kms-key-delete-protection-enabled
• rule:aliyun:kms-key-description-required
• rule:aliyun:kms-key-rotation-enabled
• rule:aliyun:kms-secret-rotation-enabled
• rule:aliyun:metadata-ros-composer-check
• rule:aliyun:nas-filesystem-encrypt-type-check
• rule:aliyun:nas-filesystem-mount-target-access-group-check
• rule:aliyun:oss-bucket-only-https-enabled
• rule:aliyun:oss-bucket-tags-required
• rule:aliyun:oss-bucket-tls-version-check
• rule:aliyun:oss-default-encryption-kms
• rule:aliyun:pai-eas-instances-multi-zone
• rule:aliyun:parameter-sensitive-noecho-check
• rule:aliyun:polardb-cluster-delete-protection-enabled
• rule:aliyun:polardb-cluster-expired-check
• rule:aliyun:polardb-cluster-maintain-time-check
• rule:aliyun:polardb-cluster-tags-required
• rule:aliyun:polardb-public-and-any-ip-access-check
• rule:aliyun:rds-instance-tags-required
• rule:aliyun:redis-instance-backup-log-enabled
• rule:aliyun:redis-instance-backup-time-check
• rule:aliyun:redis-instance-enabled-byok-tde
• rule:aliyun:redis-instance-enabled-ssl
• rule:aliyun:redis-instance-expired-check
• rule:aliyun:redis-instance-multi-zone
• rule:aliyun:redis-instance-name-required
• rule:aliyun:redis-instance-release-protection
• rule:aliyun:redis-public-and-any-ip-access-check
• rule:aliyun:slb-loadbalancer-name-required
• rule:aliyun:sls-project-description-required
• rule:aliyun:sls-project-multi-zone
• rule:aliyun:vpc-flow-logs-enabled
• rule:aliyun:vpc-name-required
• rule:aliyun:vswitch-available-ip-count
• rule:aliyun:vswitch-name-required