Main areas covered
| Area | Components | Description |
|---|---|---|
| Networking | Security groups, VPC | Restrictions on ports 22/3389 and blocking default security-group traffic |
| Storage | Cloud Disk | Disk encryption |
| Database services | CDB | Backup policies, restrictions on default port use, and public-access blocking |
| Compute | CVM, CLB | Monitoring and logging, restrictions on secret exposure, and limits on public exposure |
| Container service | TKE | Public-access restrictions, log agents, and encryption |