Management / Monitoring / Controls / v2026.11
Restrict Cross-Account Monitoring Scope
CCC.Monitor.CN09 · Access Control
Ensure that telemetry is aggregated across accounts, subscriptions, or projects only with the authorization of each linked account.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.Core.CP06 | Access Control | The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes. |
| CCC.Monitor.CP14 | Cross-Account Monitoring Scope | The service may be configured to aggregate metrics from multiple accounts, subscriptions, or projects into a single monitoring scope, so that users of the scope can view telemetry across tenancy boundaries. |
| CCC.Core.CP09 | Metrics Publication | The service automatically publishes structured, numeric, time-series data points related to the performance, availability, and health of the service or its child resources. |
Related Threats
| ID | Title | Description |
|---|
| CCC.Monitor.TH10 | Monitoring Scope Exposes Telemetry Across Accounts | A cross-account monitoring scope may be configured to link more accounts, subscriptions, or projects than intended, or the central monitoring account may be granted to users who are not authorized in the linked accounts. Users of the scope can then read metrics, traces, and alert state for every linked account without holding access in those accounts. This impacts the confidentiality of telemetry across tenancy boundaries. |
| CCC.Core.TH19 | Metrics are Read by Unauthorized Entities | Unauthorized access to runtime metrics may expose valuable information about the system's design, performance, and usage patterns. This can support the planning of attacks on the service, system, or network. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.Monitor.CN09.AR01 | When an account, subscription, or project is linked into a monitoring scope, the link MUST be authorized from within the linked account. | tlp-clear, tlp-green, tlp-amber, tlp-red |
| CCC.Monitor.CN09.AR02 | When a monitoring scope is configured, the set of linked accounts MUST match the approved list of accounts for that scope. | tlp-clear, tlp-green, tlp-amber, tlp-red |