The service may be configured to run scripted sample user interactions against an application on a schedule from provider-operated locations, in order to identify issues before real users are impacted.
Synthetic Monitoring
CCC.Monitor.CP06
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.TH03 | Monitoring Probes Overload the Monitored Target | Synthetic and uptime checks may be configured with excessive frequency, concurrency, or number of provider-operated locations, or their definitions may be modified to point at a different target. The probe traffic then consumes the capacity of the monitored endpoint from trusted provider address ranges that are typically exempt from rate limiting. This impacts the availability of the monitored system. |
| CCC.Monitor.TH04 | Monitoring Probes are Used to Reach Internal Systems | Synthetic and uptime checks run with an identity, network placement, and stored credentials that allow them to reach endpoints not otherwise exposed. If the check definition or its script can be modified, the check becomes a trusted path through which arbitrary requests are issued against internal systems and their responses are recorded. This impacts the confidentiality and integrity of the internal systems reached. |