<img src="https://ws.zoominfo.com/pixel/6169bf9791429100154fc0a2" width="1" height="1" style="display: none;">

Achieve Zero Trust in AWS 🔒 Join our hands-on workshop on February 27!

Search
Close icon
Search bar icon
Search
Close icon
Search bar icon

    StrongDM Policy Playbooks

    All Select Update Connect Global
    connect-policies
    Connect > Restrict Connecting to Production Resources to Only During Business Hours
    Restrict production access to business hours; enhance with MFA and admin approval.
    connect-policies
    Connect > Notify European Citizens That Their Sessions Are Being Recorded
    Notify EU users that sessions are recorded and actions logged.
    connect-policies
    Connect > Restrict Access to GDPR Resources to the EU
    Restrict GDPR resource access to EU regions only.
    connect-policies
    Connect > Restrict Access to Resources to EU Only
    Enforce resource access restrictions to EU-only regions.
    select-policies
    Select > Restrict Access to Users Data Table
    Block exfiltration and secure database user credentials to avoid unauthorized access.
    select-policies
    Select > Require MFA Prompt to Read Data From the Users Table
    Require MFA to prevent database user exfiltration and credential theft.
    update-policies
    Update > Require Admin Approval to Update Cardholders Table
    Require admin approval to update Credit Card Holder information.
    connect-policies
    Connect > Forbid and Revoke Sessions to Prod Resources From Unhealthy Endpoints
    Assess and revoke sessions based on device trust to maintain zero trust.
    connect-policies
    Connect > Require an MFA Prompt to Connect to All Prod Resources
    Require MFA to prevent data exfiltration and unauthorized Production access.
    select-policies
    Select > Limit Max Rows for Non-Approved Users
    Limit data collection and reduce DoS risk by restricting read actions.
    global-policies
    Select > Forbid Access to the Database Unless the User Is in the Approved Role
    Forbid PII database access without pre-approved roles, enforcing RBAC.
    update-policies
    Update > Require Admin Approval to Update “Cardholders” Table on Any PCI Database
    Require admin approval for PCI cardholder table updates to prevent attacks.
    select-policies
    Select > Restrict SELECT Actions Based on Geo Privacy Requirements, Returning 10 Rows
    Limit rows and restrict US geolocation access to prevent SQL flood DoS attacks.
    connect-policies
    Connect > Restrict Connecting to a Critical Database to Only During Business Hours
    Restrict production database access to business hours to prevent anomalies.
    connect-policies
    Connect > Permit Connections to Production Kubernetes Clusters
    Enforce MFA for privileged users accessing production Kubernetes to prevent unauthorized access and credential compromise.
    connect-policies
    Connect > Restrict Connecting to Production Kubernetes Clusters to Only During Business Hours
    Restrict production cluster access to business hours to prevent anomalies.
    connect-policies
    Connect > Require MFA for Production SSH Servers
    Enforce MFA for privileged access to production Linux servers to prevent unauthorized access.