v1.0 for Steampipe, Powerpipe, Flowpipe, 116 plugins, and 44 mods →
Powerpipe Hub 
Hub
Mods
turbot/alicloud_compliance
Overview
1Dashboards
78Controls
40Queries
2Variables
GitHub

Control: 8.7 Ensure that scheduled vulnerability scan is enabled on all servers

Description

Ensure that scheduled vulnerability scan is enabled on all servers.

Remediation

From Console

  1. Login to Security Center Console.
  2. Select Vulnerabilities.
  3. Click Settings.
  4. Apply all type of vulnerabilities.
  5. Enable High and Medium vulnerabilities scan level.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_8_7

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_8_7 --share

SQL

This control uses a named query:

manual_control

Tags

category = Compliance
cis = true
cis_item_id = 8.7
cis_level = 2
cis_section_id = 8
cis_type = automated
cis_version = v1.0.0
plugin = alicloud
service = AliCloud/SecurityCenter