ECSs Have HSS Agents Attached

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	ecs-attached-hss-agents-check
Identifier	ECSs Have HSS Agents Attached
Description	If an ECS does not have an HSS agent installed or the protection mode enabled, this ECS is non-compliant.
Tag	ecs
Trigger Type	Configuration change
Filter Type	ecs.cloudservers
Rule Parameters	None

Application Scenarios

The Host Security Service (HSS) should be installed and enabled for ECSs to comprehensively identify and manage server assets, monitor risks in servers in real time, and prevent unauthorized intrusions, helping enterprises enhance server security.

Solution

Bind the HSS agent to an ECS instance and enable protection. For details, see Accessing HSS.

Rule Logic

If an ECS does not have an HSS agent installed or enabled, this ECS is non-compliant.
If an ECS has an HSS agent installed but not enabled, this ECS is non-compliant.
If an ECS has an HSS agent installed and enabled, this ECS is compliant.

Parent topic: Elastic Cloud Server

Previous topic: ECS Backup Time Check

Next topic: Distributed Cache Service