TNS OpenStack Nova/Compute Security Guide

Audit Details

Name: TNS OpenStack Nova/Compute Security Guide

Updated: 12/22/2023

Authority: TNS

Plugin: Unix

Revision: 1.23

Estimated Item Count: 159

File Details

Filename: TNS_OpenStack_Compute_Security_Guide.audit

Size: 219 kB

MD5: 92d6713b9383c42f6f899b317910025b
SHA256: 6bfd0664a2e4f7ae8eaab24dcece47a826e6b8d5dd7fc9a85deef95b260437aa

Audit Items

DescriptionCategories
1. OpenStack Compute - Policy.json - 'os_compute_api:os-cells:delete'

ACCESS CONTROL

2. OpenStack Compute - Policy.json - 'os_compute_api:servers:stop'

ACCESS CONTROL

3. OpenStack Compute - Policy.json - 'os_compute_api:os-assisted-volume-snapshots:create'

ACCESS CONTROL

4. OpenStack Compute - Policy.json - 'os_compute_api:os-suspend-server:resume'

ACCESS CONTROL

5. OpenStack Compute - Policy.json - 'os_compute_api:os-migrate-server:migrate_live'

ACCESS CONTROL

6. OpenStack Compute - Policy.json - 'os_compute_api:os-aggregates:delete'

ACCESS CONTROL

7. OpenStack Compute - Policy.json - 'compute_extension:cells:sync_instances'

ACCESS CONTROL

8. OpenStack Compute - Policy.json - 'os_compute_api:os-tenant-networks'

ACCESS CONTROL

9. OpenStack Compute - Policy.json - 'os_compute_api:os-pci:index'

ACCESS CONTROL

10. OpenStack Compute - Policy.json - 'os_compute_api:os-console-auth-tokens'

ACCESS CONTROL

11. OpenStack Compute - Policy.json - 'os_compute_api:os-lock-server:unlock'

ACCESS CONTROL

12. OpenStack Compute - Policy.json - 'os_compute_api:os-admin-actions:reset_state'

ACCESS CONTROL

13. OpenStack Compute - Policy.json - 'compute_extension:quotas:delete'

ACCESS CONTROL

14. OpenStack Compute - Policy.json - 'compute_extension:migrations:index'

ACCESS CONTROL

15. OpenStack Compute - Policy.json - 'compute_extension:admin_actions:suspend'

ACCESS CONTROL

16. OpenStack Compute - Policy.json - 'os_compute_api:server-metadata:show'

ACCESS CONTROL

17. OpenStack Compute - Policy.json - 'os_compute_api:os-personality:discoverable'

ACCESS CONTROL

18. OpenStack Compute - Policy.json - 'compute_extension:flavor_access:removeTenantAccess'

ACCESS CONTROL

19. OpenStack Compute - Policy.json - 'os_compute_api:os-extended-server-attributes'

ACCESS CONTROL

20. OpenStack Compute - Policy.json - 'os_compute_api:os-cells:sync_instances'

ACCESS CONTROL

21. OpenStack Compute - Policy.json - 'os_compute_api:os-aggregates:index'

ACCESS CONTROL

22. OpenStack Compute - Policy.json - 'compute_extension:cells:delete'

ACCESS CONTROL

23. OpenStack Compute - Policy.json - 'context_is_admin'

ACCESS CONTROL

24. OpenStack Compute - Policy.json - 'os_compute_api:os-aggregates:update'

ACCESS CONTROL

25. OpenStack Compute - Policy.json - 'os_compute_api:os-migrate-server:migrate'

ACCESS CONTROL

26. OpenStack Compute - Policy.json - 'compute_extension:admin_actions'

ACCESS CONTROL

27. OpenStack Compute - Policy.json - 'admin_api'

ACCESS CONTROL

28. OpenStack Compute - Policy.json - 'os_compute_api:os-availability-zone:detail'

ACCESS CONTROL

29. OpenStack Compute - Policy.json - 'os_compute_api:os-security-group-default-rules'

ACCESS CONTROL

30. OpenStack Compute - Policy.json - 'os_compute_api:os-pci:detail'

ACCESS CONTROL

31. OpenStack Compute - Policy.json - 'os_compute_api:os-agents'

ACCESS CONTROL

32. OpenStack Compute - Policy.json - 'os_compute_api:os-cells:create'

ACCESS CONTROL

33. OpenStack Compute - Policy.json - 'compute_extension:cells:update'

ACCESS CONTROL

34. OpenStack Compute - Policy.json - 'compute_extension:instance_usage_audit_log'

ACCESS CONTROL

35. OpenStack Compute - Policy.json - 'compute_extension:cloudpipe_update'

ACCESS CONTROL

36. OpenStack Compute - Policy.json - 'os_compute_api:os-admin-actions:reset_network'

ACCESS CONTROL

37. OpenStack Compute - Policy.json - 'compute_extension:flavorextraspecs:update'

ACCESS CONTROL

38. OpenStack Compute - Policy.json - 'default'

ACCESS CONTROL

39. OpenStack Compute - Policy.json - 'os_compute_api:os-instance-actions:events'

ACCESS CONTROL

40. OpenStack Compute - Policy.json - 'compute_extension:aggregates'

ACCESS CONTROL

41. OpenStack Compute - Policy.json - 'os_compute_api:os-aggregates:set_metadata'

ACCESS CONTROL

42. OpenStack Compute - Policy.json - 'os_compute_api:os-cells:update'

ACCESS CONTROL

43. OpenStack Compute - Policy.json - 'os_compute_api:os-hypervisors'

ACCESS CONTROL

44. OpenStack Compute - Policy.json - 'compute_extension:agents'

ACCESS CONTROL

45. OpenStack Compute - Policy.json - 'os_compute_api:os-admin-actions:inject_network_info'

ACCESS CONTROL

46. OpenStack Compute - Policy.json - 'os_compute_api:os-services'

ACCESS CONTROL

47. OpenStack Compute - Policy.json - 'compute_extension:availability_zone:detail'

ACCESS CONTROL

48. OpenStack Compute - Policy.json - 'os_compute_api:os-hosts'

ACCESS CONTROL

49. OpenStack Compute - Policy.json - 'compute_extension:baremetal_nodes'

ACCESS CONTROL

50. OpenStack Compute - Policy.json - 'compute_extension:cells'

ACCESS CONTROL