This rule checks whether Anti-DDoS is enabled to guard against DDoS attacks. Resources with Anti-DDoS enabled are evaluated as compliant.
Scenarios
Enable the Anti-DDoS service to defend against DDoS attacks and maintain network stability and availability, protecting business operations from disruption.
Risk level
Default risk level: high.
You can change the risk level as needed.
Detection logic
This rule checks whether Anti-DDoS is enabled to prevent DDoS attacks. If Anti-DDoS is enabled, the resource is evaluated as compliant.
Rule details
|
Parameter |
Description |
|
Rule name |
Use Anti-DDoS to prevent DDoS attack threats |
|
Rule identifier |
|
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic: Every 24 hours |
|
Supported resource type |
ACS::::Account |
|
Input parameters |
None |
Remediation guidance
For more information, see Configure global protection policies.