DigitalOcean Rules
Every DigitalOcean security and compliance rule iCompaas evaluates — what it covers, why it matters, and how to remediate it in DigitalOcean.
45 articles
- Ensure Droplet Is Not Publicly Accessible
- Ensure Droplet Backups Are Enabled
- Ensure Droplet Is Attached To A Cloud Firewall
- Ensure Database Connections Enforce SSL/TLS
- Ensure Database Is Not Publicly Accessible
- Ensure Database Has Automated Backups Enabled
- Ensure Database Firewall Rules Restrict Access To Trusted Sources
- Ensure Alert Policies Exist For CPU, Memory, Disk, And Downtime
- Ensure Unused Reserved IPs Are Released
- Ensure Reserved IPs Are Mapped Only To Authorized Resources
- Ensure Load Balancer Enforces HTTPS/TLS Termination
- Ensure Health Checks Are Configured For Backend Resources
- Ensure Resources Are Deployed Within A VPC
- Ensure Unused VPCs Are Removed
- Ensure Unused Or Unattached Volumes Are Identified And Removed
- Ensure Volumes Have Snapshot Or Backup Policies
- Ensure Automated Backup Schedules Are Enabled For Droplets
- Ensure Access Keys For Spaces Are Rotated every 90 days
- Ensure Network File Storage Shares Are Restricted To Authorized VPC Or IP Ranges
- Ensure Kubernetes Node Pools Maintain A Minimum Scale Limit Greater Than One Worker Node
- Ensure Kubernetes Node Pool Has Autoscaling Enabled
- Ensure Surge Upgrades Are Enabled For Zero-Downtime Node Replacements
- Ensure Kubernetes Cluster Auto-Upgrade Is Enabled
- Ensure Maintenance Window Has Been Enabled For Kubernetes Cluster
- Ensure Certificates Expiring Within 7 Days Or Less Are Reported
- Ensure Network File Storage Has A Snapshot Created
- Ensure Kubernetes Cluster Networks Use Private IP Address Ranges
- Ensure Kubernetes Service Networks Use Private IP Address Ranges
- Ensure Kubernetes Clusters Use An Authorized Container Registry
- Ensure Container Registries Are Not Configured As Read-Only Unless Intended
- Ensure Unused NAT Gateways Are Removed
- Ensure There Are No Unintended Internet-Facing Load Balancers
- Ensure Cloud Firewalls Do Not Allow Unrestricted SSH Access
- Ensure Cloud Firewalls Do Not Allow Unrestricted RDP Access
- Ensure There Are No Security Groups Without Ingress Filtering
- Ensure Cloud Firewalls Do Not Allow Unrestricted MySQL Access
- Ensure Cloud Firewalls Do Not Allow Unrestricted PostgreSQL Access
- Ensure Managed Database Engine Version Is Supported
- Ensure Database Has A Read-Only Node Enabled
- Ensure Databases Are Configured With A Standby Node For High Availability
- Ensure Database Has Autoscale Enabled
- Ensure Managed Databases Have A Defined Maintenance Window
- Ensure Droplets Have Recent Snapshots Configured For Data Recovery
- Ensure There Are No Unused Cloud Firewalls
- Ensure App Platform Health Checks Are Configured