Benchmark: 4 IBM Cloud Databases Family

Overview

This section contains recommendations for configuring IBM Cloud Database Family.

Databases that follow this paradigm are: Databases for PostgreSQL, Databases for MongoDB, Databases for Elasticsearch, Databases for RabbitMQ, Databases for Redis, Databases for etcd, Databases for EDB, Databases for DataStax.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-ibm-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 4 IBM Cloud Databases Family.

Run this benchmark in your terminal:

powerpipe benchmark run ibm_compliance.benchmark.cis_v100_4

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run ibm_compliance.benchmark.cis_v100_4 --share

Controls

• 4.1 Ensure IBM Cloud Databases disk encryption is enabled with customer managed keys
• 4.2 Ensure IBM Cloud Databases are only accessible via HTTPS or TLS Connections
• 4.3 Ensure network access to IBM Cloud Databases service is set to be exposed on “Private end points only
• 4.4 Ensure IBM Cloud Databases disk encryption is set to On

Tags