We currently use IBM Cloud (bluemix and softlayer services). However there is no single way to audit our cloud configuration as a whole.
Tools like Nessus allows us to scan our cloud configuration using api key/secret combination. However this feature is not available for IBM cloud. This is more like a feature request as a scan would help us get a holistic security posture. This support is available with leading cloud providers like AWS, Azure, rackspace and etc Please can yo look into this ?
| Idea priority | Medium |
By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.
Nessus has been deprecated
Hello! Thank you for reaching out with feedback. I'll first address the audit concern in particular - we do have a service called Activity Tracker which has integrations for the IBM Cloud services, as documented here :
https://console.bluemix.net/docs/services/cloud-activity-tracker/cloud_services.html#cloud_services
For the wider concern around holistic security posture, I will pass this on to the team to review.
If you have any questions about either item, or wish to provide additional information, you can add them here.
Thank you !!