High-risk tools in Alibabacloud Devops
19 of the 202 tools in Alibabacloud Devops are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
execute_app_release_stageExecute[application delivery] 执行变更请求的发布流程阶段
-
execute_job_actionExecute[application delivery] 操作环境部署单
-
execute_pipeline_job_actionExecute[Pipeline Management] Execute a subsequent action of a pipeline job.
-
execute_pipeline_job_runExecute[Pipeline Management] Manually run a pipeline task. Start a specific job in a pipeline run instance.
-
execute_system_release_stageExecute[application delivery] 执行系统发布流程阶段
-
pass_app_release_stage_validateExecute[application delivery] 通过发布流程阶段验证
-
pass_pipeline_validateExecute[Pipeline Management] Approve/pass a manual checkpoint (human validation gate) in a pipeline run.
-
refuse_app_release_stage_validateExecute[application delivery] 拒绝发布流程阶段验证
-
refuse_pipeline_validateExecute[Pipeline Management] Refuse/reject a manual checkpoint (human validation gate) in a pipeline run.
-
rerun_pipeline_job_runExecute[Pipeline Management] Rerun a pipeline job. Only deploy-type jobs are supported. You can set a job as deploy type in its configuration.
-
resume_vm_deploy_orderExecute[VM Deploy Order Management] Resume VM deploy order
-
retry_app_release_stage_pipelineExecute[application delivery] 重试变更请求的发布流程阶段流水线
-
retry_pipeline_job_runExecute[Pipeline Management] Retry a failed pipeline job run.
-
retry_vm_deploy_machineExecute[VM Deploy Order Management] Retry VM deploy machine
-
skip_app_release_stage_pipelineExecute[application delivery] 跳过变更请求的发布流程阶段流水线
-
skip_pipeline_job_runExecute[Pipeline Management] Skip a pipeline job run.
-
skip_vm_deploy_machineExecute[VM Deploy Order Management] Skip VM deploy machine
-
stop_pipeline_job_runExecute[Pipeline Management] Stop/terminate a running pipeline job.
-
stop_vm_deploy_orderExecute[VM Deploy Order Management] Stop VM deploy order
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.