Skip to main content

Cloud Firewall Asset Protection Enabled

ID: rule:aliyun:firewall-asset-open-protect
Severity: medium
IaC Types: ROS, Terraform

Description​

Ensures assets are protected by Cloud Firewall.

Reason for Violation​

Unprotected assets are vulnerable to internet-based threats.

Recommendation​

Add ALIYUN::CLOUDFW::FwSwitch resource to enable protection for all public-facing assets in Cloud Firewall.

Resource Types​

  • ROS: ALIYUN::CLOUDFW::FwSwitch
  • Terraform: alicloud_cloud_firewall_control_policy