精选 Skills 索引（第 159 页）
按质量分排序的前 8,000 个 Skills，每个都有可收录的独立页面。需要全库 15.8 万条检索时，请使用 Skills 目录。
- cis-aws-compute-5.3
Disable SSH and RDP ports for Lightsail instances when not needed
- cis-aws-compute-5.4
Ensure SSH is restricted to only IP address that should have this access
- cis-aws-compute-5.5
Ensure RDP is restricted to only IP address that should have this access
- cis-aws-compute-5.6
Disable IPv6 Networking if not in use within your organization
- cis-aws-compute-5.7
Ensure you are using an IAM policy to manage access to buckets in Lightsail
- cis-aws-compute-5.8
Ensure Lightsail instances are attached to the buckets
- cis-aws-compute-5.9
Ensure that your Lightsail buckets are not publicly accessible
- cis-aws-compute-6.1
Ensure you are using VPC Endpoints for source code access
- cis-aws-compute-8.1
Ensure AWS Batch is configured with AWS CloudWatch Logs
- cis-aws-compute-8.2
Ensure Batch roles are configured for cross-service confused deputy prevention
- cis-aws-database-10.10
Ensure Database has automated Backups enabled
- cis-aws-database-10.3
Ensure Encryption in Transit is Configured
- cis-aws-database-10.4
Ensure Access Control and Authentication is Enabled
- cis-aws-database-10.5
Ensure Fine-Grained Access Control is Enabled
- cis-aws-database-10.7
Ensure Regular Updates and Patches are Installed
- cis-aws-database-10.8
Ensure Monitoring and Alerting is Enabled
- cis-aws-database-10.9
Ensure to Review and Update the Security Configuration
- cis-aws-database-11.1
Ensure to Implement Identity and Access Management (IAM)
- cis-aws-database-11.5
Ensure to Implement Access Control and Authentication
- cis-aws-database-11.6
Ensure Monitoring and Logging is Enabled
- cis-aws-database-2.11
Ensure Database has delete protection enabled
- cis-aws-database-2.3
Ensure Data in Transit Encryption is Enforced
- cis-aws-database-2.4
Ensure IAM Roles and Policies are Created
- cis-aws-database-2.5
Ensure Database Audit Logging is Enabled
- cis-aws-database-2.8
Ensure Automatic Backups and Retention Policies are configured
- cis-aws-database-2.9
Ensure Database is not Publicly accessible
- cis-aws-database-3.1
Ensure to Choose the Appropriate Database Engine
- cis-aws-database-3.11
Ensure to Regularly Review Security Configuration
- cis-aws-database-3.12
Ensure Database is not Publicly accessible
- cis-aws-database-3.14
Ensure Database has delete protection enabled
- cis-aws-database-3.2
Ensure to Create The Appropriate Deployment Configuration
- cis-aws-database-3.3
Ensure to Create a Virtual Private Cloud (VPC)
- cis-aws-database-3.7
Ensure to Implement Access Control and Authentication
- cis-aws-database-3.9
Ensure Monitoring and Logging is Enabled
- cis-aws-database-4.1
Ensure AWS Identity and Access Management (IAM) is in use
- cis-aws-database-4.2
Ensure Fine-Grained Access Control is implemented
- cis-aws-database-4.6
Ensure DynamoDB Streams and AWS Lambda for Automated Compliance Checking is Enabled
- cis-aws-database-4.7
Ensure Monitor and Audit Activity is enabled
- cis-aws-database-4.8
Ensure Database has delete protection enabled
- cis-aws-database-5.10
Ensure Security Configurations are Reviewed Regularly