Alibaba Cloud Linux MLPS 2.0 Level 3 Edition is a hardened version of the Alibaba Cloud Linux general-purpose operating system. Alibaba Cloud applies additional MLPS compliance hardening on top of the base operating system so that the edition meets the basic security requirements for Multi-Level Protection Scheme (MLPS) 2.0 Level 3.
Overview
Based on the security requirements for operating systems defined in GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity, Alibaba Cloud has hardened its self-developed, cloud-native Alibaba Cloud Linux operating system for MLPS 2.0 Level 3 compliance to create this out-of-the-box edition. This edition helps you meet the following MLPS compliance requirements:
-
identity authentication
-
access control
-
security audit
-
intrusion prevention
-
malware protection
For more information about the MLPS compliance check rules, see Check rules for the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image.
Benefits
The Alibaba Cloud Linux MLPS 2.0 Level 3 Edition offers the following benefits:
-
Cost-effective: The Alibaba Cloud Linux MLPS 2.0 Level 3 Edition works out of the box with no additional fees for MLPS compliance hardening.
-
Saves effort: Security Center provides baseline check policies to automatically determine whether an instance meets MLPS compliance requirements.
-
Saves time: You can use a custom image that has undergone MLPS compliance hardening to create multiple ECS instances in batches.
Billing
Billing for the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition is the same as for its selected base image. The MLPS compliance hardening itself incurs no additional charges.
When the base image is Alibaba Cloud Linux, the image is free of charge. You pay only for other resources, such as vCPUs, memory, storage, public bandwidth, and snapshots. For more billing details, see Billing overview.
When the base image is Alibaba Cloud Linux Pro, in addition to the fees for instance resources, you are also charged a license fee for the image. For details, see Image billing.
Use cases
If your workloads on Alibaba Cloud must comply with GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity, the process can be complex and technically demanding. To simplify compliance and quickly meet MLPS 2.0 requirements, create ECS instances from the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image.
Usage
|
Actions |
Description |
|
You can select the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image when you create an ECS instance. After the ECS instance is created, you must complete the MLPS compliance hardening configuration during your first remote connection. |
|
|
Configure a baseline check policy for an Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image |
Alibaba Cloud provides an MLPS-compliant baseline check standard and scanning tool for the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image. You can perform the required operations in Security Center. |
|
Create instances in batches by using a custom image with MLPS compliance hardening |
If your business requires multiple ECS instances that use the Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image, you can create the instances in batches from a custom image that has undergone MLPS compliance hardening. This method eliminates the need to configure hardening on each instance individually. |
For solutions to common issues with the MLPS 2.0 Level 3 Edition image, see Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image FAQ.