|
+Images for Virtual Machines and Containers |
Images for Virtual Machines and ContainersIf cloud customers operate virtual machines or containers with the cloud service, the Cloud Service Provider must ensure the following aspects:• The cloud customer can restrict the selection of images of virtual machines or containers according to his specifications, so that users of this cloud customer can only launch the images or containers released according to these restrictions. • If the Cloud Service Provider provides images of virtual machines or containers to the Cloud Customer, the Cloud Service Provider appropriately inform the Cloud Customer of the changes made to the previous version. • In addition, these images provided by the Cloud Service Provider are hardened according to generally accepted industry standards. Additonal CriteriaAt startup and runtime of virtual machine or container images, an integrity check is performed that detects image manipulations and reports them to the cloud customer. Supplementary Information - About the CriteriaThis criterion is typically not applicable to the SaaS service model. Generally accepted industry standards are, for example, the Security Configuration Benchmark of the Centre for Internet Security (CIS) or the corresponding modules in the BSI IT 1. Apžvalga
1.1 Nuorodos1.2 Nustatyti reikalavimai1.3 Susiję teisės aktai2. Nustatyti reikalavimai
3. Susiję teisės aktai
|