Evaluates whether Bastionhost Enterprise Edition or SM Edition is deployed across multiple zones for stability. A multi-zone deployment is evaluated as Compliant.
Scenarios
Deploying Bastionhost across multiple zones enables O&M personnel to seamlessly switch between zones, improving access security and high availability.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
If Bastionhost Enterprise Edition or SM Edition is deployed across multiple zones for stability, the evaluation result is Compliant. This rule does not apply to historical versions of Bastionhost.
Rule details
|
Parameter |
Description |
|
Rule template name |
bastionhost-instance-spec-check |
|
Rule template identifier |
|
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration Change Periodic: Every 24 hours |
|
Supported resource type |
ACS::Bastionhost::Instance |
|
Input parameter |
None |
Non-compliance remediation
For more information, see Upgrade instance specifications.