Skip to content

Ensure Tencent Cloud CVM monitor service is enabled

Description

This policy checks whether the Tencent Cloud CVM monitor service is enabled. The monitor service is crucial for logging and monitoring instance performance and security. Disabling it may lead to a lack of visibility into potential security issues. Enabling the monitor service ensures that logs are collected and can be used for auditing and compliance purposes.

Code Example

terraform
resource "tencentcloud_instance" "example" {
  disable_monitor_service = false
}

Remediation

Enable the Tencent Cloud CVM monitor service by setting 'disable_monitor_service' to False.

Rule Details

FieldValue
IDIAC-1320
SeverityMEDIUM
IaC TypeTerraform
Frameworkstencentcloud_instance
Checkov IDCKV_TC_3

References