Webhooks 1 min read

How does OpsIQ protect remote HTTP actions from SSRF?

How does OpsIQ protect remote HTTP actions from SSRF?

Remote actions utilize declared endpoints and include protections against server-side request forgery (SSRF). These protections come with various authentication options, including Bearer, API key, Basic, and HMAC.

To enhance security, administrators should follow these best practices:

  • Avoid arbitrary user-controlled URLs.
  • Restrict destinations.
  • Validate host/IP behavior.
  • Use least-privilege credentials.

Related articles

Discussion

Loading the discussion…