Protect APIs and consoles used to create virtual machines, configure networks, and change permissions in the cloud.
What kind of protection is this?
The management plane controls cloud resources through APIs and consoles and should use strong authentication and least privilege.
Detailed explanation
Incorrect. The requirement concerns administrative operations, not only data-plane encryption.
Incorrect. The requirement concerns administrative operations, not only data-plane encryption.
Correct. Resource creation and configuration through APIs or consoles belong to the management plane.
Correct. Resource creation and configuration through APIs or consoles belong to the management plane.
Incorrect. Physical keyboards are unrelated to cloud API authorization.
Incorrect. Physical keyboards are unrelated to cloud API authorization.
Incorrect. Log compression does not protect management operations.
Incorrect. Log compression does not protect management operations.
Try it yourself
An example you can run in a temporary verification environment.
printf '%s\n' 'management plane controls cloud resources'Expected result
management plane controls cloud resourcesKey points
- Management plane
- API
- Least privilege
Notes
- Environment: クラウド管理面の概念確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.