Ensures that 0.0.0.0 is not included in any IP address allowlist of an ApsaraDB for OceanBase tenant.
Scenarios
Configure an IP address allowlist for each tenant of an ApsaraDB for OceanBase cluster based on the principle of least privilege to reduce network exposure and improve cloud network security.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level as needed.
Compliance evaluation logic
- Compliant: 0.0.0.0 is not included in any IP address allowlist of the ApsaraDB for OceanBase tenant.
- Non-compliant: 0.0.0.0 is included in an IP address allowlist of the ApsaraDB for OceanBase tenant. To correct this configuration, see Non-compliance remediation.
Rule details
| Item | Description |
| Rule name | oceanbase-tenant-security-ip-check |
| Rule ID | oceanbase-tenant-security-ip-check |
| Tag | OceanBase and Tenant |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Time interval | 24 hours |
| Supported resource type | ApsaraDB for OceanBase cluster |
| Input parameter | None |
Non-compliance remediation
Configure an IP address allowlist for the ApsaraDB for OceanBase tenant. For more information, see Whitelist group.