Skip to main content

Metrics Publication

CCC.Core.CP09

The service automatically publishes structured, numeric, time-series data points related to the performance, availability, and health of the service or its child resources.

Related Threats

IDTitleDescription
CCC.Core.TH08Runtime Metrics are ManipulatedManipulation of runtime metrics can lead to inaccurate representations of system performance and resource utilization. This compromised data integrity may also impact system availability through misinformed scaling decisions, budget exhaustion, financial losses, and hindered incident detection.
CCC.Core.TH19Metrics are Read by Unauthorized EntitiesUnauthorized access to runtime metrics may expose valuable information about the system's design, performance, and usage patterns. This can support the planning of attacks on the service, system, or network.
CCC.Core.TH16Publications are DisabledPublication of events, metrics, and runtime logs may be disabled, leading to a lack of expected security and operational information being shared. This can impact system availability by delaying the detection of incidents while also impacting system design decisions and enforcement of operational thresholds, such as autoscaling or cost management.