How does OpsIQ protect remote HTTP actions from SSRF?
How does OpsIQ protect remote HTTP actions from SSRF?
Remote actions utilize declared endpoints and include protections against server-side request forgery (SSRF). These protections come with various authentication options, including Bearer, API key, Basic, and HMAC.
To enhance security, administrators should follow these best practices:
- Avoid arbitrary user-controlled URLs.
- Restrict destinations.
- Validate host/IP behavior.
- Use least-privilege credentials.
Related articles
Was this article helpful?
Discussion
Loading the discussion…
Sign in to join the discussion.