Best practice rules for Alibaba Cloud Security Center
- Config Assessment Authorization
Ensure that Config Assessment is authorized to access other cloud resources.
- Enable Asset Fingerprints Data Collection
Ensure that automatic collection of server fingerprints is enabled in the Security Center settings.
- Enable Malicious Behavior Defense
Ensure that Malicious Behavior Defense is enabled within your Alibaba Cloud account.
- Enable Scheduled Vulnerability Scan
Ensure that scheduled vulnerability scan is enabled on all servers.
- Enable Security Center Notifications
Ensure that Security Center notifications are enabled for all high risk items.
- Enable Webshell Protection
Ensure that Webshell Protection is enabled within your Alibaba Cloud account.
- Install Security Center Agent
Ensure that Security Center agent is installed on all hosts.
- Security Center Plan
Ensure that your Security Center plan is set to Advanced or Enterprise Edition.