What are Checks? 
When a rule is
run against the infrastructure (resources) associated with your AWS account, the
result of the scan is referred to as a Check. For example, an EC2
Security Group may have 80 Trend Vision One™ – Cloud Posture Rules (Checks)
scanning for various risks/vulnerabilities.
Viewing Checks
To view Checks associated with an account, click Browse all
checks on the summary section of the Cloud Posture Dashboard.
Each Check has the following information associated with it:
Procedure
- Status
- Failure - rule has failed for a specific resource
- Success - rule has passed for a specific resource
- Suppressed - rule has been suppressed and its status will not be included in your compliance score
- Failure introduced date
- A message describing the issue
- Account
- Region
- A link to the resource
Check Actions
You can take the following actions on a Check:
Procedure
- Resolve the failures
- On clicking the expand button against a rule or a resource:
- Send rule to
- Configure rule
- Suppress
- Create tickets depending on the communication channels configured
Failure and Success Definition
Every Rule has an implementation associated with it, which will then determine if
a Check against the Rule is successful or not. For example, if you have an S3
bucket with public read permissions enabled, the “S3 Bucket Public 'READ'
Access”’ Rule will be applied towards all S3 buckets in your AWS account. If any
S3 bucket has Public Read enabled, then the Check for that S3 bucket is a
failure.
Not Scored Checks
Some rules are documented by Cloud Posture but cannot be tested against your cloud
infrastructure due to not being applicable to cloud infrastructure or
limitations of the data provided by the cloud provider. Rules that are only
informational are identified as Not Scored.
Cloud Posture may not be able to test the Rule completely, we do provide you with
some high-level information that can be beneficial, e.g. Check whether
'Alternate contacts for your AWS Accounts' have been set up. You can pass on the
information to your team via a communication channeland keep them informed as well.
You can neither ‘Resolve’ or ‘Suppress’ these Rules as
they do not affect your compliance score.
To view a list of all Not Scored Rules in your account:
Procedure
- Browse All Checks report.
- Enter “not scored” in the Filter by resource id, rule title or message.
- Click Generate Report.