Checks whether the whitelists of a Time Series Database (TSDB) instance contain 0.0.0.0/0. A TSDB instance that does not allow access from all IP addresses is evaluated as compliant.
Scenarios
Adding 0.0.0.0/0 to a TSDB instance whitelist allows access from all IP addresses, which poses significant security risks.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If 0.0.0.0/0 is not included in the whitelists of the TSDB instance, the evaluation result is Compliant.
- If 0.0.0.0/0 is included in a whitelist of the TSDB instance, the evaluation result is Non-compliant. To remediate a non-compliant configuration, see the "Incompliance remediation" section of this topic.
Rule details
| Item | Description |
| Rule name | tsdb-instance-security-ip-check |
| Rule identifier | tsdb-instance-security-ip-check |
| Tag | TSDB and Public |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | TSDB instances |
| Input parameter | None |
Incompliance remediation
Remove 0.0.0.0/0 from all whitelists of TSDB instances. For more information, see Network connection.