Checks whether a brute-force attack protection rule is created for an Elastic Compute Service (ECS) instance in Security Center. If a rule exists, the evaluation result is Compliant.
Scenarios
Brute-force attack protection helps prevent server account passwords from being cracked.
Risk level
Default risk level: medium.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
-
If a brute-force attack protection rule is created for the ECS instance in Security Center, the evaluation result is Compliant.
-
If no brute-force attack protection rule is created for the ECS instance in Security Center, the evaluation result is Incompliant. To remediate this issue, see the "Incompliance remediation" section of this topic.
Rule details
|
Parameter |
Description |
|
Rule template name |
ecs-instance-enable-security-center-anti-rule |
|
Rule template identifier |
ecs-instance-enable-security-center-anti-rule |
|
Tag |
ECS, Instance, and SecurityCenter |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
Interval of 24 hours |
|
Supported resource type |
ECS instances |
|
Input parameter |
None |
Incompliance remediation
Create brute-force attack protection rules for ECS instances in Security Center. For more information, see Defense against brute-force attacks.