A cross-account monitoring scope may be configured to link more accounts, subscriptions, or projects than intended, or the central monitoring account may be granted to users who are not authorized in the linked accounts. Users of the scope can then read metrics, traces, and alert state for every linked account without holding access in those accounts. This impacts the confidentiality of telemetry across tenancy boundaries.
Monitoring Scope Exposes Telemetry Across Accounts
CCC.Monitor.TH10
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP06 | Access Control | The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes. |
| CCC.Monitor.CP14 | Cross-Account Monitoring Scope | The service may be configured to aggregate metrics from multiple accounts, subscriptions, or projects into a single monitoring scope, so that users of the scope can view telemetry across tenancy boundaries. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.CN09 | Restrict Cross-Account Monitoring Scope | Ensure that telemetry is aggregated across accounts, subscriptions, or projects only with the authorization of each linked account. |