CloudBox physical devices are deployed in your data center. You are responsible for the security of the data center environment and the physical CloudBox devices. CloudBox also provides hardware hardening measures for its infrastructure, such as environmental monitoring, physical interface hardening, and system disk encryption. These measures help reduce physical security risks.
Physical security
Because CloudBox physical devices are deployed in your data center, you are responsible for the security of the physical environment and its related infrastructure. You must implement measures such as theft prevention, fire prevention, lightning protection, waterproofing, moisture-proofing, temperature and humidity control, and personnel management. These measures prevent CloudBox devices from failing or being damaged by environmental issues and protect against physical intrusion, damage, or theft.
CloudBox implements physical hardening measures for its hardware to reduce security risks. These measures include the following:
Power and Environment Monitoring
Sensors monitor the temperature, humidity, and smoke inside the CloudBox rack. This data is sent to the public cloud for monitoring and alerting. You can view the status in the CloudBox console. Electronic locks or magnetic door sensors monitor unauthorized rack door openings. You can also view this status in the CloudBox console. Cameras monitor and capture physical operations on CloudBox to help detect threats and collect evidence. This feature is used by the Alibaba Cloud Operations Hub and is not visible in your console. The availability of these features may vary based on the specific environment.
Physical interface hardening
Interfaces on physical devices, such as servers and vSwitches, are hardened. This includes out-of-band management ports, USB ports, and serial ports. These ports are either blocked or require authentication for access. This hardening may not apply to certain special device models. You do not need to access these interfaces during normal operation. Any unauthorized access is considered a security violation.
System disk encryption
The system disk is encrypted to prevent tampering or data theft. This measure protects Alibaba Cloud assets and does not protect your business data.