Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.12] Cloud security posture dashboard 8.12 updates (backport #4530) #4588

Merged
merged 1 commit into from
Jan 11, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@ image::images/cloud-sec-dashboard.png[The cloud Security dashboard]
The Cloud Security Posture dashboard shows:

* Configuration risk metrics for all monitored cloud accounts and Kubernetes clusters
* Configuration risk metrics for individual cloud accounts and Kubernetes clusters
* Configuration risks grouped by CIS Section (security guideline category)
* Configuration risk metrics grouped by the applicable benchmark, for example CIS GCP, CIS Azure, CIS Kubernetes, or CIS EKS
* Configuration risks grouped by CIS section (security guideline category)

.Requirements
[sidebar]
Expand All @@ -24,13 +24,13 @@ The Cloud Security Posture dashboard shows:
[[cspm-posture-dashboard-UI]]
== Cloud Security Posture dashboard UI

At the top of the dashboard, you can switch between the cloud accounts and Kubernetes clusters views.
At the top of the dashboard, you can switch between the cloud accounts and Kubernetes cluster views.

The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets. Click *View all resources* to open the <<findings-page, Findings page>>.
The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets. Click *View all resources* to open the <<findings-page, Findings page>>.

The remaining summary cards show your overall posture score, and total failed findings grouped by CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.
The remaining summary cards show your overall compliance score, and your compliance score for each CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.

Below the summary section, each row shows the CSP of a single cloud account or Kubernetes cluster, including its name, when its posture was last evaluated, its compliance score, and failed findings grouped by CIS section. When you begin to monitor a new account or cluster, a new row appears.
Below the summary section, each row shows the CSP for a benchmark that applies to your monitored cloud resources. For example, if you are monitoring GCP and Azure cloud accounts, a row appears for CIS GCP and another appears for CIS Azure. Each row shows the CIS benchmark, the number of cloud accounts it applies to, its overall compliance score, and its compliance score grouped by CIS section.

[role="screenshot"]
image::images/cloud-sec-dashboard-individual-row.png[A row representing a single cluster in the Cloud Security Posture dashboard]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@ image::images/cloud-sec-dashboard.png[The cloud Security dashboard]
The Cloud Security Posture dashboard shows:

* Configuration risk metrics for all monitored cloud accounts and Kubernetes clusters
* Configuration risk metrics for individual cloud accounts and Kubernetes clusters
* Configuration risks grouped by CIS Section (security guideline category)
* Configuration risk metrics grouped by the applicable benchmark, for example, CIS GCP, CIS Azure, CIS Kubernetes, or CIS EKS
* Configuration risks grouped by CIS section (security guideline category)

.Requirements
[sidebar]
Expand All @@ -26,11 +26,12 @@ The Cloud Security Posture dashboard shows:

At the top of the dashboard, you can switch between the cloud accounts and Kubernetes cluster views.

The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets.
The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets. Click *View all resources* to open the <<findings-page, Findings page>>.

Click *View all resources* to open the <<findings-page, Findings page>>. The remaining summary cards show your overall posture score, and total failed findings grouped by CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.
The remaining summary cards show your overall compliance score, and your compliance score for each CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.

Below the summary section, each row shows the CSP for a benchmark that applies to your monitored cloud resources. For example, if you are monitoring EKS and Kubernetes clusters, a row appears for CIS EKS and another appears for CIS Kubernetes. Each row shows the CIS benchmark, the number of clusters it applies to, its overall compliance score, and its compliance score grouped by CIS section.

Below the summary section, each row shows the CSP of a single Cloud account or Kubernetes cluster, including its name, when its posture was last evaluated, its compliance score, and failed findings grouped by CIS section. When you begin to monitor a new account or cluster, a new row appears.

[role="screenshot"]
image::images/cloud-sec-dashboard-individual-row.png[A row representing a single cluster in the Cloud Security Posture dashboard]
Expand Down
10 changes: 5 additions & 5 deletions docs/dashboards/cloud-posture.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@ image::images/cloud-sec-dashboard.png[The cloud Security dashboard]
The Cloud Security Posture dashboard shows:

* Configuration risk metrics for all monitored cloud accounts and Kubernetes clusters
* Configuration risk metrics for individual cloud accounts and Kubernetes clusters
* Configuration risks grouped by CIS Section (security guideline category)
* Configuration risk metrics grouped by the applicable benchmark, for example, CIS GCP, CIS Azure, CIS Kubernetes, or CIS EKS
* Configuration risks grouped by CIS section (security guideline category)

.Requirements
[sidebar]
Expand All @@ -25,11 +25,11 @@ The Cloud Security Posture dashboard shows:

At the top of the dashboard, you can switch between the cloud accounts and Kubernetes cluster views.

The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets.
The top section of either view summarizes your overall cloud security posture (CSP) by aggregating data from all monitored resources. The summary cards on the left show the number of cloud accounts or clusters evaluated, and the number of resources evaluated. You can click *Enroll more accounts* or *Enroll more clusters* to deploy to additional cloud assets. Click *View all resources* to open the <<findings-page, Findings page>>.

Click *View all resources* to open the <<findings-page, Findings page>>. The remaining summary cards show your overall posture score, and total failed findings grouped by CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.
The remaining summary cards show your overall compliance score, and your compliance score for each CIS section. Click *View all failed findings* to view all failed findings, or click a CIS section name to view failed findings from only that section on the Findings page.

Below the summary section, each row shows the CSP of a single Cloud account or Kubernetes cluster, including its name, when its posture was last evaluated, its compliance score, and failed findings grouped by CIS section. When you begin to monitor a new account or cluster, a new row appears.
Below the summary section, each row shows the CSP for a benchmark that applies to your monitored cloud resources. For example, if you are monitoring GCP and Azure cloud accounts, a row appears for CIS GCP and another appears for CIS Azure. Each row shows the CIS benchmark, the number of cloud accounts it applies to, its overall compliance score, and its compliance score grouped by CIS section.

[role="screenshot"]
image::images/cloud-sec-dashboard-individual-row.png[A row representing a single cluster in the Cloud Security Posture dashboard]
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/dashboards/images/cloud-sec-dashboard.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.