Evaluates whether assets with high-risk weak passwords are detected by Security Center. Assets with no weak passwords detected are considered compliant.
Scenarios
Identifies Elastic Compute Service (ECS) instances that are exposed to the Internet with weak passwords, helping enhance system security.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If no weak-password asset that is exposed to high security risks is detected, the evaluation result is Compliant.
- If a weak-password asset that is exposed to high security risks is detected, the evaluation result is Non-compliant. For information about how to fix this, see the "Incompliance remediation" section of this topic.
Rule details
| Item | Description |
| Rule name | security-center-weak-password-check |
| Rule identifier | security-center-weak-password-check |
| Tag | SecurityCenter |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | All resources |
| Input parameter | None |
Incompliance remediation
Fix the weak-password assets that are exposed to high security risks. For more information, see Asset exposure analysis.