Checks whether Security Center has detected any leaked AccessKey pairs. If no leaked AccessKey pairs are detected, the evaluation result is Compliant.
Scenarios
Leaked AccessKey pairs expose your cloud systems and resources to high security risks.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If no leaked AccessKey pairs are detected in the Security Center console, the evaluation result is Compliant.
- If a leaked AccessKey pair is detected in the Security Center console, the evaluation result is Incompliant. For information about how to fix this issue, see the "Incompliance remediation" section of this topic.
Rule details
| Item | Description |
| Rule name | security-center-leak-ak-check |
| Rule identifier | security-center-leak-ak-check |
| Tag | SecurityCenter |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | All resources |
| Input parameter | None |
Incompliance remediation
Make sure that no AccessKey pairs are leaked. For more information, see AccessKey pair leak detection.