Benchmark: Dynamic Information Flow Control AC-4(3)
Description
The information system enforces dynamic information flow control based on organization-defined policies.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Dynamic Information Flow Control AC-4(3).
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.nist_sp_800_53_rev_5_ac_4_3
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.nist_sp_800_53_rev_5_ac_4_3 --share
Controls
- Adaptive network hardening recommendations should be applied on internet facing virtual machines
- Management ports of virtual machines should be protected with just-in-time network access control