Databases

Chef Premium Content has current coverage for 15 databases benchmarks, with every audit version and remediation version currently available. See benchmark coverage for how audit and remediation coverage are tracked, and the Compliance solution overview for what each does.

For what each coverage term means, see how to read the coverage tables.

Inspect database configuration directly

Most database benchmarks above rely on Chef InSpec core resources, such as mssql_session, oracledb_session, postgres_session, and mysql_session. You can use those same resources to write controls for requirements that no prebuilt benchmark covers.

Chef InSpec also provides two database resource packs:

• MongoDB resource pack — inspect MongoDB configuration and query a running instance
• Elasticsearch resource pack — inspect Elasticsearch configuration

Chef doesn’t publish a prebuilt compliance benchmark for Elasticsearch. The resource pack is for authoring your own checks, and doesn’t indicate Elasticsearch benchmark coverage.

A resource pack isn’t a benchmark and doesn’t assess anything on its own. It provides the resources you use to write your own controls.

Related

• Chef Premium Content
• Compliance solution overview
• Compliance audit
• Compliance remediation
• The Chef way of custom compliance checks
• Chef InSpec
• Compliance reporting in Chef Automate