This implementation automates reporting to verify compliance with GC Cloud Guardrails. SSC and TBS review the results. Cette mise en œuvre automatise la production de rapports afin de vérifier la conformité aux mesures de sécurité infonuagique du GC. SPC et SCT examinent les résultats.
Other
7
stars
4
forks
source link
Guardrail 12: MarketPlaceCreation (M) Missing Check for Enablement #84
Is your feature request related to a problem? Please describe.
The control looks at the creation of Private Marketplace only. This is not a complete check- to ensure restriction has been achieved it should look at the creation status and the availability.
Describe the solution you'd like
In addition to the current check there should be an "and" to ensure the marketplace has an availability of "enabled".
Private MarketPlace has been created and it has been set to enabled. If one, or both of the checks fail then the control is non-compliant.
Comments
If compliant, "Marketplace has been created and enabled"
If non compliant, "Marketplace has been created and but it has not been enabled"
If non compliant "Neither Marketplace has been created and it has not been enabled"
Use Case to Note
Clients may restrict marketplace at the enrollment level- decision required as to how to handle these use cases.
Is your feature request related to a problem? Please describe. The control looks at the creation of Private Marketplace only. This is not a complete check- to ensure restriction has been achieved it should look at the creation status and the availability.
Describe the solution you'd like In addition to the current check there should be an "and" to ensure the marketplace has an availability of "enabled".
Private MarketPlace has been created and it has been set to enabled. If one, or both of the checks fail then the control is non-compliant.
Use Case to Note