- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- FAQs
- Contact Us
- Glossary
- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- FAQs
- Contact Us
- Glossary
G
Associated resource
An associated resource is a resource associated with the current resource; for example:
1. The current resource is encompassed by the associated resource, such as a CVM instance being embraced within a Virtual Private Cloud (VPC).
2. The current resource is associated with the related resource, like a CVM instance correlated with a CVM Security Group.
3. Current resources mount associated resources, such as a CVM instance mounting an EIP.
4. Current resources encompass associated resources, such as a Virtual Private Cloud (VPC) including a NAT Gateway.
Please refer to Supported Resource Types for the resource relationships currently supported by the system.
Rule
A rule signifies a functional criterion used to determine whether resource configurations comply. CloudConfig employs these functions to bear rule code. Presently, CloudConfig only supports hosted rules, namely predefined rule templates of CloudConfig. When establishing a new rule, you can select the target hosted rule directly from the CloudConfig console. For further information, please consult Rules.
H
Compliance Pack
A Compliance Pack is a collection of rules customized according to compliance scenarios. It is divided into system pre-set Compliance Packs and user-defined Compliance Packs. For the Compliance Pack templates currently supported by the system, please refer to Supported Compliance Pack Templates.
Compliance evaluation result
The compliance evaluation result indicates the result of the evaluation of the associated resource against the rule at a certain time point.
P
Configuration Item
A Configuration Item at a specific point in time refers to a collection of various characteristic data of a resource, composed of Metadata, Attributes, Relationships, and Details of Configuration. For further details, refer to the Resources > Resource Timeline.
T
Managed rule
A Managed Rule is one that has been predefined by CloudConfig. When creating a new rule, the target managed rule can be directly selected from the CloudConfig console. Please refer to Supported Managed Rules for the managed rules currently supported by the system.
Z
Resource Type
A Resource Type refers to a set of physical resources that possess the same characteristics within the same cloud service. They have dedicated names for their types in the six-segment format of resources. These include examples of physical resources like computation instances and storage instances, and administrative resources like roles and policies.
Resource types in CloudConfig are described by resource identifiers. For additional insight, please refer to Supported Resource Types.
Resource timeline
The resource timeline encapsulates the comprehensive life-cycle data of the resource, inclusive of configuration details, configuration change logs, resource modification operations, along with the results of compliance assessments. Kindly refer to Viewing Resource Details for additional information.
Yes
No
Was this page helpful?