Control: 8.1 Ensure that Security Center is Advanced or Enterprise Edition
Description
The Advanced or Enterprise Edition enables threat detection for network and endpoints, providing malware detection, webshell detection and anomaly detection in Security Center.
Remediation
From Console
- Logon to Security Center Console.
- Select
Overview. - Click
Upgrade.` - Select
AdvancedorEnterprise Edition. - Finish order placement.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_8_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_8_1 --shareSQL
This control uses a named query:
select account_id as resource, case when version in ('2', '3', '5') then 'ok' else 'alarm' end as status, case when version in ('2','3') then 'Security Center Enterprise edition enabled.' when version in ('5') then 'Security Center Advanced edition enabled.' else 'Security Center Enterprise or Advanced edition disabled.' end as reason , account_id as account_id, region as regionfrom alicloud_security_center_version;