Checks whether Bastionhost Enterprise Edition or SM Edition is deployed in multiple zones to ensure stability. If so, the evaluation result is Compliant.
Scenarios
If Bastionhost is deployed in multiple zones, O&M personnel can seamlessly perform operations among different zones. This improves access security and high availability.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
If Bastionhost Enterprise Edition or SM Edition is deployed in multiple zones to ensure stability, the evaluation result is Compliant. This rule does not apply to historical versions of Bastionhost.
Rule details
Parameter | Description |
Rule template name | bastionhost-instance-spec-check |
Rule template identifier | |
Automatic remediation | Not supported |
Trigger type | Configuration Change Periodic: Every 24 hours |
Supported resource type | ACS::Bastionhost::Instance |
Input parameter | None |
Non-compliance remediation
For more information, see Upgrade a bastion host.