等保三级预检合规包

ID: pack:aliyun:mlps-level-3-pre-check-compliance-pack

描述

基于等保三级的部分要求，对阿里云上资源的合规性做检测。

包含的规则

• rule:aliyun:ack-cluster-encryption-enabled
• rule:aliyun:ack-cluster-node-multi-zone
• rule:aliyun:ack-cluster-public-endpoint-check
• rule:aliyun:actiontrail-trail-intact-enabled
• rule:aliyun:alb-instance-multi-zone
• rule:aliyun:ecs-disk-auto-snapshot-policy
• rule:aliyun:ecs-in-use-disk-encrypted
• rule:aliyun:ecs-instance-enabled-security-protection
• rule:aliyun:ecs-instances-in-vpc
• rule:aliyun:ecs-running-instance-no-public-ip
• rule:aliyun:ecs-security-group-risky-ports-check-with-protocol
• rule:aliyun:eip-bandwidth-limit
• rule:aliyun:elasticsearch-instance-multi-zone
• rule:aliyun:elasticsearch-public-and-any-ip-access-check
• rule:aliyun:firewall-asset-open-protect
• rule:aliyun:mongodb-instance-multi-zone
• rule:aliyun:nas-filesystem-mount-target-access-group-check
• rule:aliyun:oss-bucket-authorize-specified-ip
• rule:aliyun:oss-bucket-only-https-enabled
• rule:aliyun:oss-bucket-policy-no-any-anonymous
• rule:aliyun:oss-bucket-policy-outside-organization-check
• rule:aliyun:oss-bucket-public-read-prohibited
• rule:aliyun:oss-bucket-versioning-enabled
• rule:aliyun:oss-default-encryption-kms
• rule:aliyun:oss-zrs-enabled
• rule:aliyun:polardb-cluster-enabled-ssl
• rule:aliyun:polardb-cluster-enabled-tde
• rule:aliyun:polardb-cluster-multi-zone
• rule:aliyun:polardb-public-and-any-ip-access-check
• rule:aliyun:ram-group-has-member-check
• rule:aliyun:ram-policy-no-statements-with-admin-access-check
• rule:aliyun:ram-user-ak-used-expired-check
• rule:aliyun:ram-user-last-login-expired-check
• rule:aliyun:ram-user-login-check
• rule:aliyun:ram-user-mfa-check
• rule:aliyun:ram-user-no-policy-check
• rule:aliyun:rds-instance-enabled-auditing
• rule:aliyun:rds-instance-enabled-disk-encryption
• rule:aliyun:rds-instance-enabled-log-backup
• rule:aliyun:rds-instance-has-guard-instance
• rule:aliyun:rds-instances-in-vpc
• rule:aliyun:rds-multi-az-support
• rule:aliyun:rds-public-connection-and-any-ip-access-check
• rule:aliyun:redis-instance-multi-zone
• rule:aliyun:redis-instance-open-auth-mode
• rule:aliyun:redis-public-and-any-ip-access-check
• rule:aliyun:root-mfa-check
• rule:aliyun:security-center-version-check
• rule:aliyun:sg-public-access-check
• rule:aliyun:slb-acl-public-access-check
• rule:aliyun:slb-all-listener-servers-multi-zone
• rule:aliyun:slb-all-listenter-tls-policy-check
• rule:aliyun:slb-listener-risk-ports-check
• rule:aliyun:slb-loadbalancer-bandwidth-limit
• rule:aliyun:sls-logstore-enabled-encrypt
• rule:aliyun:use-waf-instance-for-security-protection
• rule:aliyun:vpc-flow-logs-enabled
• rule:aliyun:vpc-network-acl-risky-ports-check

---

此文档由策略元数据自动生成。