Skip to content

Commit

Permalink
updates KSPM benchmarks page, updates title
Browse files Browse the repository at this point in the history
  • Loading branch information
benironside committed Mar 19, 2024
1 parent ab2608d commit c2a78b0
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 9 deletions.
4 changes: 2 additions & 2 deletions docs/cloud-native-security/cspm-benchmark-rules.asciidoc
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[[cspm-benchmark-rules]]
= Benchmark rules
The Benchmark Integrations page lets you view the cloud security posture (CSP) benchmark rules for the <<cspm, Cloud security posture management>> (CSPM) and <<kspm, Kubernetes security posture management>> (KSPM) integrations.
= Benchmarks
The Benchmarks page lets you view the cloud security posture (CSP) benchmark rules for the <<cspm, Cloud security posture management>> (CSPM) and <<kspm, Kubernetes security posture management>> (KSPM) integrations.

Benchmark rules are used by these integrations to identify configuration risks in your cloud infrastructure. Benchmark rules are based on the Center for Internet Security's (CIS) https://www.cisecurity.org/cis-benchmarks/[secure configuration benchmarks].

Expand Down
16 changes: 9 additions & 7 deletions docs/cloud-native-security/kspm-benchmark-rules.asciidoc
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[[benchmark-rules]]
= Benchmark rules
The Benchmark Integrations page lets you view the cloud security posture (CSP) benchmark rules for the <<cspm, Cloud security posture mangaement>> (CSPM) and <<kspm, Kubernetes security posture management>> (KSPM) integrations.
[[cspm-benchmark-rules]]
= Benchmarks
The Benchmarks page lets you view the cloud security posture (CSP) benchmark rules for the <<cspm, Cloud security posture management>> (CSPM) and <<kspm, Kubernetes security posture management>> (KSPM) integrations.

Benchmark rules are used by these integrations to identify configuration risks in your cloud infrastructure. Benchmark rules are based on the Center for Internet Security's (CIS) https://www.cisecurity.org/cis-benchmarks/[secure configuration benchmarks].

Expand All @@ -14,18 +14,20 @@ Each benchmark rule checks to see if a specific type of resource is configured a

When benchmark rules are evaluated, the resulting <<findings-page, findings>> data appears on the <<cloud-posture-dashboard, Cloud Security Posture dashboard>>.

To find the Benchmark Integrations page, go to **Rules -> Benchmark rules**. From there, you can view the benchmark rules associated with an existing integration by clicking the integration name.
To find the Benchmark Integrations page, go to **Rules -> Benchmarks**. From there, you can click an existing security posture management integration's name to view the benchmark rules associated with it. You can also enable or disable individual rules for the integration. All rules are enabled by default, but you can disable some of them to customize the integration to your environment. Benchmark rules are not editable.

To enable or disable a rule, use the **Enabled** toggle on the right of the rules table.

NOTE: Disabling a benchmark rule automatically disables any associated detection rules and alerts. Re-enabling a benchmark rule does not automatically re-enable them.

[role="screenshot"]
image::images/benchmark-rules.png[Benchmark rules page]

You can then click on a benchmark rule's name to see details, including information about how to remediate failures and related links.

NOTE: Benchmark rules are not editable.

[discrete]
== How benchmark rules work

. When a security posture management integration is deployed, and every four hours after that, {agent} fetches relevant cloud resources.
. After resources are fetched, they are evaluated against all applicable benchmark rules.
. After resources are fetched, they are evaluated against all applicable enabled benchmark rules.
. Finding values of `pass` or `fail` indicate whether the standards defined by benchmark rules were met.

0 comments on commit c2a78b0

Please sign in to comment.