This topic describes how to create, modify, or delete a baseline check policy.
Baseline check is a value-added service of Security Center. Only Enterprise Edition users can activate and use this service. A Basic Edition or Pro Edition user must upgrade to Enterprise Edition to use this service.
After you activate this service, Security Center automatically scans all assets based on the default policy. The details of this check are as follows:
Time: From 06:00 to 12:00 every day.
Object: All assets under your Alibaba Cloud account.
You can also customize a baseline check policy that covers the baseline items that are not covered by the default policy.
Procedure
- Log on to the Security Center console.
- In the left-side navigation pane, click Baseline Check.
- In the upper-right corner, click Manage Policies to customize a policy or modify the default policy.
- In the upper-right corner of the Manage Policies page, click Create Policy.
Configuration item Description Policy Name Enter a policy name. Cycle Set the cycle to 1 day, 3 days, 7 days, or 30 days. Set the time to 00:00-06:00, 06:00-12:00, 12:00-18:00, or 18:00-24:00. Check Items Select check items under the categories including database, system, weak password, and middleware baseline. For more information about baseline check items, see Baseline check items.
Servers Select the asset groups to which you want to apply this policy. Note New servers belong to by default. To apply this policy to new servers, select Default. - On the Manage Policies page, click Edit or Delete to modify or delete a specified policy.
Note You cannot restore a deleted policy.
- Click Edit next to the Default policy. You can select the asset groups to which the default policy is applied.
Note You cannot delete the default policy or modify the check items in the default policy.
- Below the Manage Policies page, you can set the level range (high, medium, low) for the baseline check.
- In the upper-right corner of the Manage Policies page, click Create Policy.