Documentation
| Article | Path |
|---|---|
| Alicloud RAM policy grants broad permissions | terraform/alicloud/ram_policy_admin_access_not_attached_to_users_groups_roles |
| Review NetworkPolicy support in Alicloud ACK | terraform/alicloud/kubernetes_cluster_without_terway_as_cni_network_plugin |
| Review customer-managed keys for an Alicloud OSS bucket | terraform/alicloud/oss_bucket_cmk_encryption_disabled |
| Review Alibaba Cloud VPC flow log collection | terraform/alicloud/vpc_flow_logs_disabled |
| Alicloud API Gateway API allows HTTP | terraform/alicloud/api_gateway_api_protocol_not_https |
| Alicloud ALB listener uses HTTP | terraform/alicloud/alb_listening_on_http |
| Review IP access restrictions for Alicloud OSS buckets | terraform/alicloud/oss_bucket_ip_restriction_disabled |
| Review KMS keys for Alicloud ECS data disks | terraform/alicloud/ecs_data_disk_kms_key_id_undefined |
| Review customer-managed KMS keys for Alicloud NAS | terraform/alicloud/nas_file_system_without_kms |
| Alicloud OSS lifecycle rule is disabled | terraform/alicloud/oss_bucket_lifecycle_disabled |
| Review transfer acceleration for Alicloud OSS | terraform/alicloud/oss_bucket_transfer_acceleration_disabled |
| Review the minimum Alicloud RAM password length | terraform/alicloud/ram_account_password_policy_not_required_minimum_length |
| Review the uppercase requirement for Alicloud RAM passwords | terraform/alicloud/ram_password_security_policy_not_require_at_least_one_uppercase_character |
| Review the lowercase requirement for Alicloud RAM passwords | terraform/alicloud/ram_password_security_policy_not_require_at_least_one_lowercase_character |
| Review the number requirement for Alicloud RAM passwords | terraform/alicloud/ram_account_password_policy_not_required_numbers |
| Review the symbol requirement for Alicloud RAM passwords | terraform/alicloud/ram_account_password_policy_not_required_symbols |
| Review mandatory MFA for Alicloud RAM console access | terraform/alicloud/ram_security_preference_not_enforce_mfa |
| Review Alicloud RDS SQL record retention | terraform/alicloud/rds_instance_retention_not_recommended |
| Review Alibaba Cloud RDS log collection coverage | terraform/alicloud/rds_instance_events_not_logged |
| Alicloud ROS stack has no event notifications | terraform/alicloud/ros_stack_notifications_disabled |
| Review Alibaba Cloud RDS TLS connection settings | terraform/alicloud/rds_instance_ssl_action_disabled |
| Alicloud OSS bucket does not require HTTPS | terraform/alicloud/oss_buckets_securetransport_disabled |
| Review protection policies for Alibaba Cloud ROS stack updates | terraform/alicloud/no_ros_stack_policy |
| Review stack retention when removing an Alibaba Cloud ROS stack instance | terraform/alicloud/ros_stack_retention_disabled |
| TDE is disabled on an Alicloud RDS instance | terraform/alicloud/rds_instance_tde_status_disabled |
| Alicloud ACK node pool has no automatic repair | terraform/alicloud/cs_kubernetes_node_pool_auto_repair_disabled |
| RDS IP allow-list is unrestricted or invalid | terraform/alicloud/rds_instance_publicly_accessible |
| Public access to an ActionTrail OSS bucket | terraform/alicloud/actiontrail_trail_oss_bucket_is_publicly_accessible |
| Public access enabled on an Alicloud OSS bucket | terraform/alicloud/oss_bucket_public_access_enabled |
| Review data-disk encryption in Alicloud Launch Templates | terraform/alicloud/launch_template_is_not_encrypted |
| Review Alicloud Simple Log Service retention | terraform/alicloud/log_retention_is_not_greater_than_90_days |
| Alicloud OSS bucket has no access logging | terraform/alicloud/oss_bucket_logging_disabled |
| Review Alibaba Cloud ActionTrail log coverage | terraform/alicloud/action_trail_logging_all_regions_disabled |
| OSS bucket policy contains wildcards in actions and principals | terraform/alicloud/oss_bucket_allows_all_actions_from_all_principals |
| Wildcard principals in Alicloud OSS listing policies | terraform/alicloud/oss_bucket_allows_list_action_from_all_principals |
| OSS bucket policy combines wildcard principals with delete actions | terraform/alicloud/oss_bucket_allows_delete_from_all_principals |
| OSS bucket policy combines wildcard principals with put actions | terraform/alicloud/oss_bucket_allows_put_action_from_all_principals |
| Alicloud security group rule exposes sensitive ports | terraform/alicloud/public_security_group_rule_sensitive_port |
| Alicloud OSS bucket versioning is disabled | terraform/alicloud/oss_bucket_versioning_disabled |
| Alicloud RAM password reuse prevention is disabled | terraform/alicloud/ram_account_password_policy_without_reuse_prevention |
| Alicloud RAM policy is attached directly to a user | terraform/alicloud/ram_policy_attached_to_user |
| Review the enabled state of an Alicloud KMS key | terraform/alicloud/cmk_is_unusable |
| Review Alibaba Cloud RDS PostgreSQL duration logging | terraform/alicloud/rds_instance_log_duration_disabled |
| Alicloud disk is not encrypted | terraform/alicloud/disk_encryption_disabled |
| Unencrypted Alicloud NAS file system | terraform/alicloud/nas_file_system_not_encrypted |
| Review Alibaba Cloud RDS PostgreSQL connection logging | terraform/alicloud/rds_instance_log_connections_disabled |
| Review Alibaba Cloud RDS PostgreSQL disconnection logging | terraform/alicloud/rds_instance_log_disconnections_disabled |
| Alicloud SLB policy allows outdated TLS versions | terraform/alicloud/slb_policy_with_insecure_tls_version_in_use |
| Public ports in an Alicloud security group need a documented purpose | terraform/alicloud/public_security_group_rule_unknown_port |
| RDS instance uses an unsupported address setting | terraform/alicloud/rds_instance_address_publicly_accessible |
| Alicloud security group rule allows all ports or protocols from the internet | terraform/alicloud/public_security_group_rule_all_ports_or_protocols |
| Alicloud OSS bucket configured as a static website | terraform/alicloud/oss_bucket_has_static_website |
| Review the Alicloud RAM failed sign-in limit | terraform/alicloud/ram_account_password_policy_max_login_attempts_unrecommended |
| Review the Alicloud RAM password expiration period | terraform/alicloud/ram_account_password_policy_max_password_age_unrecommended |
| Review the template configuration for Alibaba Cloud ROS stacks | terraform/alicloud/ros_stack_without_template |
| Review automatic rotation of Alicloud KMS keys | terraform/alicloud/high_kms_key_rotation_period |