Control: 8.2 Ensure that all assets are installed with security agent
Description
Enable protection on all endpoints.
Remediation
Using the management console:
- Logon to Security Center Console.
- Select
Settings. - Click
Agent. - On
Client to be installedtab, select all items on the list. - Click
One-click installationto install the agent on all assets.
Default Value:
Not installed.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v200_8_2Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v200_8_2 --shareSQL
This control uses a named query:
select 'acs:securitycenter:' || region || ':' || account_id || ':asset/' || coalesce(instance_id, uuid) as resource, case when client_status = 'online' then 'ok' else 'alarm' end as status, case when client_status = 'online' then 'Asset ' || uuid || ' has security center agent installed and online.' when client_status = 'offline' then 'Asset ' || uuid || ' has security center agent installed but is offline.' when client_status = 'uninstall' then 'Asset '|| uuid || ' does not have security center agent installed.' when client_status is null then 'Asset ' || uuid || ' security center agent status unknown.' else 'Asset ' || uuid || ' security center agent status: ' || client_status || '.' end as reason , account_id as account_id, region as regionfrom alicloud_security_center_asset;