38 lines
1.7 KiB
YAML
38 lines
1.7 KiB
YAML
|
standard: security-zone-control-profile_v0.1
|
||
|
|
profile_id: netkingdom-build-v0.1
|
||
|
|
version: flex-auth@e521e7b+ops-warden@7ce58ae
|
||
|
|
controls:
|
||
|
|
flex-auth/pre-sign:
|
||
|
|
policy_owner: flex-auth
|
||
|
|
pep_owner: ops-warden
|
||
|
|
policy_ref: flex-auth@e521e7b:examples/ops-warden/policy_package.md
|
||
|
|
zones:
|
||
|
|
z0-experimental: {stance: advisory, failure_mode: fail_open}
|
||
|
|
z1-operational: {stance: advisory, failure_mode: fail_open}
|
||
|
|
z2-protected: {stance: enforced, failure_mode: fail_open}
|
||
|
|
z2-continuity: {stance: enforced, failure_mode: fail_open}
|
||
|
|
z3-critical: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
unknown: {stance: advisory, failure_mode: fail_open}
|
||
|
|
ops-warden/agent-high-risk-read:
|
||
|
|
policy_owner: ops-warden
|
||
|
|
pep_owner: ops-warden
|
||
|
|
policy_ref: ops-warden@7ce58ae:src/warden/routing/models.py
|
||
|
|
zones:
|
||
|
|
z0-experimental: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z1-operational: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z2-protected: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z2-continuity: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z3-critical: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
unknown: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
ops-warden/plan-zone-rule:
|
||
|
|
policy_owner: ops-warden
|
||
|
|
pep_owner: ops-warden
|
||
|
|
policy_ref: security-zones_v0.1@104d5c6:section-5.1
|
||
|
|
zones:
|
||
|
|
z0-experimental: {stance: advisory, failure_mode: fail_closed}
|
||
|
|
z1-operational: {stance: advisory, failure_mode: fail_closed}
|
||
|
|
z2-protected: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z2-continuity: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
z3-critical: {stance: enforced, failure_mode: fail_closed}
|
||
|
|
unknown: {stance: enforced, failure_mode: fail_closed}
|