NIST SP 800-210 General Access Control Guidance for Cloud Systems
Section 3: Access control guidance for IaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

NIST SP 800-210 General Access Control Guidance for Cloud Systems 3.1: Enforce IaaS network boundaries with allowlists and tenant VLANs

What does 3.1 require?

On the shared IaaS network, access control at network boundaries and allowlists for permitted communications are required, applied for example through dedicated virtual LANs with automated access control lists, so that traffic for a server is routed only when tagged with that server's unique VLAN identifier.

Maintained by Gerard Blokdyk

Other controls in Section 3: Access control guidance for IaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-210 General Access Control Guidance for Cloud Systems controls