TNS OpenStack Keystone/Identity Security Guide

Audit Details

Name: TNS OpenStack Keystone/Identity Security Guide

Updated: 12/22/2023

Authority: TNS

Plugin: Unix

Revision: 1.21

Estimated Item Count: 160

File Details

Filename: TNS_OpenStack_Identity_Security_Guide.audit

Size: 208 kB

MD5: f52b156e7caef4b44b1ee85887acf349
SHA256: 1ac4818ea1e78d03e71dd97bec4e7214abec0a115200a0d54acfd3109701835f

Audit Items

DescriptionCategories
1. OpenStack Identity - Policy.json - 'identity:update_domain_config'

ACCESS CONTROL

2. OpenStack Identity - Policy.json - 'identity:ec2_get_credential'

ACCESS CONTROL

3. OpenStack Identity - Policy.json - 'identity:revoke_grant'

ACCESS CONTROL

4. OpenStack Identity - Policy.json - 'identity:update_consumer'

ACCESS CONTROL

5. OpenStack Identity - Policy.json - 'identity:list_user_projects'

ACCESS CONTROL

6. OpenStack Identity - Policy.json - 'identity:create_trust'

ACCESS CONTROL

7. OpenStack Identity - Policy.json - 'identity:get_endpoint'

ACCESS CONTROL

8. OpenStack Identity - Policy.json - 'identity:list_projects'

ACCESS CONTROL

9. OpenStack Identity - Policy.json - 'identity:list_users'

ACCESS CONTROL

10. OpenStack Identity - Policy.json - 'identity:list_access_token_roles'

ACCESS CONTROL

11. OpenStack Identity - Policy.json - 'identity:update_project'

ACCESS CONTROL

12. OpenStack Identity - Policy.json - 'identity:delete_identity_provider'

ACCESS CONTROL

13. OpenStack Identity - Policy.json - 'identity:list_users_in_group'

ACCESS CONTROL

14. OpenStack Identity - Policy.json - 'identity:create_group'

ACCESS CONTROL

15. OpenStack Identity - Policy.json - 'identity:list_consumers'

ACCESS CONTROL

16. OpenStack Identity - Policy.json - 'identity:delete_policy_association_for_region_and_service'

ACCESS CONTROL

17. OpenStack Identity - Policy.json - 'identity:get_role'

ACCESS CONTROL

18. OpenStack Identity - Policy.json - 'identity:update_service'

ACCESS CONTROL

19. OpenStack Identity - Policy.json - 'identity:update_endpoint'

ACCESS CONTROL

20. OpenStack Identity - Policy.json - 'identity:get_service_provider'

ACCESS CONTROL

21. OpenStack Identity - Policy.json - 'identity:ec2_delete_credential'

ACCESS CONTROL

22. OpenStack Identity - Policy.json - 'identity:delete_endpoint'

ACCESS CONTROL

23. OpenStack Identity - Policy.json - 'identity:remove_endpoint_group_from_project'

ACCESS CONTROL

24. OpenStack Identity - Policy.json - 'identity:create_domain_config'

ACCESS CONTROL

25. OpenStack Identity - Policy.json - 'identity:update_service_provider'

ACCESS CONTROL

26. OpenStack Identity - Policy.json - 'identity:list_service_providers'

ACCESS CONTROL

27. OpenStack Identity - Policy.json - 'identity:create_consumer'

ACCESS CONTROL

28. OpenStack Identity - Policy.json - 'identity:remove_user_from_group'

ACCESS CONTROL

29. OpenStack Identity - Policy.json - 'identity:delete_service'

ACCESS CONTROL

30. OpenStack Identity - Policy.json - 'identity:get_trust'

ACCESS CONTROL

31. OpenStack Identity - Policy.json - 'identity:update_domain'

ACCESS CONTROL

32. OpenStack Identity - Policy.json - 'admin_or_token_subject'

ACCESS CONTROL

33. OpenStack Identity - Policy.json - 'identity:validate_token_head'

ACCESS CONTROL

34. OpenStack Identity - Policy.json - 'identity:update_region'

ACCESS CONTROL

35. OpenStack Identity - Policy.json - 'identity:list_access_tokens'

ACCESS CONTROL

36. OpenStack Identity - Policy.json - 'identity:list_projects_associated_with_endpoint_group'

ACCESS CONTROL

37. OpenStack Identity - Policy.json - 'identity:list_projects_for_endpoint'

ACCESS CONTROL

38. OpenStack Identity - Policy.json - 'identity:add_endpoint_group_to_project'

ACCESS CONTROL

39. OpenStack Identity - Policy.json - 'identity:check_user_in_group'

ACCESS CONTROL

40. OpenStack Identity - Policy.json - 'identity:list_services'

ACCESS CONTROL

41. OpenStack Identity - Policy.json - 'identity:create_grant'

ACCESS CONTROL

42. OpenStack Identity - Policy.json - 'identity:delete_policy_association_for_endpoint'

ACCESS CONTROL

43. OpenStack Identity - Policy.json - 'identity:create_endpoint'

ACCESS CONTROL

44. OpenStack Identity - Policy.json - 'default'

ACCESS CONTROL

45. OpenStack Identity - Policy.json - 'identity:get_access_token'

ACCESS CONTROL

46. OpenStack Identity - Policy.json - 'identity:delete_role'

ACCESS CONTROL

47. OpenStack Identity - Policy.json - 'identity:get_identity_providers'

ACCESS CONTROL

48. OpenStack Identity - Policy.json - 'identity:update_credential'

ACCESS CONTROL

49. OpenStack Identity - Policy.json - 'identity:get_consumer'

ACCESS CONTROL

50. OpenStack Identity - Policy.json - 'admin_required'

ACCESS CONTROL