+SYS.1.6.A8 Secure Storage of Container Access Data (B)

SYS.1.6.A8 Secure Storage of Container Access Data (B)

Access data MUST be stored and managed in such a way that only authorised persons and containers can access it. In particular, it MUST be ensured that access data is only stored in specially protected locations and not in images. The access data management mechanisms provided by container service management software SHOULD be used.

At minimum, the following credentials MUST be stored securely:

  • Passwords of any accounts
  • API keys for services used by the application
  • Keys for symmetric encryption
  • Private keys for public key authentication

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.46 Loss of Integrity of Sensitive Information