Managed Rules

Last updated: 2024-03-04 14:26:59

Managed Rules

Last updated: 2024-03-04 14:26:59

Config supports the following managed rules. For other managed rules, you can submit a ticket.
Cloud Service
Resource Type
Managed Rule
﻿
Cloud Access Management (CAM)
QCS::CAM::User
﻿MFA on sensitive operations required for CAM users.﻿
﻿
QCS::CAM::User
﻿MFA on login required for CAM users.﻿
﻿
QCS::CAM::Group
﻿No idle user groups on CAM.﻿
﻿
QCS::CAM::User
QCS::CAM::Group
﻿Association with user group required for CAM user.﻿
﻿
QCS::CAM::User
﻿No authorization policies directly added to CAM sub-account﻿
﻿
QCS::CAM::User
﻿No administrator access permissions granted to CAM users, user groups, or roles.﻿
﻿
QCS::CAM::User
QCS::CAM::Group
QCS::CAM::Role
﻿Granting of specific high-risk permissions by CAM not allowed.﻿
﻿
QCS::CAM::Policy
﻿No idle permission policies on CAM.﻿
﻿
QCS::CAM::Policy
﻿CAM login permission check.﻿
﻿
QCS::CAM::User
﻿Key of CAM user rotated at specified interval.﻿
﻿
QCS::CAM::User
﻿
﻿Login by CAM user within specified time range.﻿
CVM
QCS::CVM::Instance
﻿CVM instance associated with specified security group.﻿
﻿
QCS::CVM::Instance
CVM Instance has not entered the Recycle Bin.
﻿
QCS::CVM::Instance
﻿Association of CVM instance with specified role.﻿
﻿
QCS::CVM::Instance
﻿CVM instance enabled automatic renewal.﻿
﻿
QCS::CVM::Instance
﻿Notification about expiration for CVM instance in monthly subscription or pay-as-you-go mode.﻿
﻿
QCS::CVM::Instance
﻿Expiration protection for CVM instance in pay-as-you-go mode.﻿
﻿
QCS::VPC::SecurityGroup
﻿No Idle Security Groups.﻿
﻿
QCS::CVM::Instance
﻿CVM instance in VPC.﻿
﻿
QCS::CVM::Instance
﻿No CVM instances not assigned to project.﻿
﻿
QCS::CVM::Instance
﻿Inactive duration of CVM instance after shutdown not exceeding specified number of days.﻿
﻿
QCS::CVM::Instance
﻿Lease duration of CVM instance meeting requirement of specified number of days.﻿
﻿
QCS::CVM::Instance
﻿CVM instance bound to public IPv4 address.﻿
CBS
QCS::CBS::Disk
﻿No idle CBS disks.﻿
﻿
QCS::CBS::Disk
﻿CBS disk enabled arrear protection.﻿
﻿
QCS::CBS::Disk
﻿CBS disk enabled encryption.﻿
﻿
QCS::CBS::Disk
﻿Detachable CBS disk not moved to Recycling Bin.﻿
TAG
QCS::CVM::Instance
﻿Specified tag existed for resource.﻿
SecurityGroup
QCS::VPC::SecurityGroup
﻿Access to remote risky ports by security group not allowed.﻿
﻿
QCS::VPC::SecurityGroup
﻿Access to all ports by security groups not allowed.﻿
Subnet
QCS::VPC::Subnet
﻿Number of available IP addresses in VPC subnet greater than specified value.﻿
﻿

Was this page helpful?

You can also Contact Sales or Submit a Ticket for help.

Yes

Feedback

Cloud Service	Resource Type	Managed Rule
Cloud Access Management (CAM)	QCS::CAM::User	MFA on sensitive operations required for CAM users.
		QCS::CAM::User	MFA on login required for CAM users.
		QCS::CAM::Group	No idle user groups on CAM.
		QCS::CAM::User QCS::CAM::Group	Association with user group required for CAM user.
		QCS::CAM::User	No authorization policies directly added to CAM sub-account
		QCS::CAM::User	No administrator access permissions granted to CAM users, user groups, or roles.
		QCS::CAM::User QCS::CAM::Group QCS::CAM::Role	Granting of specific high-risk permissions by CAM not allowed.
		QCS::CAM::Policy	No idle permission policies on CAM.
		QCS::CAM::Policy	CAM login permission check.
		QCS::CAM::User	Key of CAM user rotated at specified interval.
		QCS::CAM::User	Login by CAM user within specified time range.
CVM	QCS::CVM::Instance	CVM instance associated with specified security group.
		QCS::CVM::Instance	CVM Instance has not entered the Recycle Bin.
		QCS::CVM::Instance	Association of CVM instance with specified role.
		QCS::CVM::Instance	CVM instance enabled automatic renewal.
		QCS::CVM::Instance	Notification about expiration for CVM instance in monthly subscription or pay-as-you-go mode.
		QCS::CVM::Instance	Expiration protection for CVM instance in pay-as-you-go mode.
		QCS::VPC::SecurityGroup	No Idle Security Groups.
		QCS::CVM::Instance	CVM instance in VPC.
		QCS::CVM::Instance	No CVM instances not assigned to project.
		QCS::CVM::Instance	Inactive duration of CVM instance after shutdown not exceeding specified number of days.
		QCS::CVM::Instance	Lease duration of CVM instance meeting requirement of specified number of days.
		QCS::CVM::Instance	CVM instance bound to public IPv4 address.
CBS	QCS::CBS::Disk	No idle CBS disks.
		QCS::CBS::Disk	CBS disk enabled arrear protection.
		QCS::CBS::Disk	CBS disk enabled encryption.
		QCS::CBS::Disk	Detachable CBS disk not moved to Recycling Bin.
TAG	QCS::CVM::Instance	Specified tag existed for resource.
SecurityGroup	QCS::VPC::SecurityGroup	Access to remote risky ports by security group not allowed.
SecurityGroup		QCS::VPC::SecurityGroup	Access to all ports by security groups not allowed.
Subnet	QCS::VPC::Subnet	Number of available IP addresses in VPC subnet greater than specified value.

tencent cloud