Protect APIs and consoles used to create virtual machines, configure networks, and change permissions in the cloud.
What kind of protection is this?
The management plane controls cloud resources through APIs and consoles and should use strong authentication and least privilege.
Detailed explanation
Incorrect. The requirement concerns administrative operations, not only data-plane encryption.
Correct. Resource creation and configuration through APIs or consoles belong to the management plane.
Incorrect. Physical keyboards are unrelated to cloud API authorization.
Incorrect. Log compression does not protect management operations.
Try it yourself
An example you can run in a temporary verification environment.
printf '%s\n' 'management plane controls cloud resources'Expected result
management plane controls cloud resourcesKey points
- Management plane
- API
- Least privilege
Notes
- Environment: クラウド管理面の概念確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Administrative operations
Creating, changing, and deleting resources require strong authentication and auditability.
Separation
Keep administrator permissions separate from the permissions used by application workloads.