March 24, 2026, Conformity: A summary of Trend Cloud One Conformity Updates for the week ending on 20 March 2026.
New Rules
Azure
-
Databricks-006: Use Network Security Groups: This rule ensures that your Azure Databricks workspaces are using Network Security Groups (NSGs) for traffic control.
-
Databricks-007: Configure Diagnostic Log Delivery for Azure Databricks: This rule ensures that diagnostic log delivery is configured for Azure Databricks workspaces.
-
KeyVault-020: Check for Certificate Validity Period: This rule ensures that certificates stored in Azure Key Vault are valid for 12 months or less.
GCP
-
Spanner-003: Enable Customer-Managed Encryption Keys (CMEK) for Cloud Spanner Backups: This rule ensures that Google Cloud Spanner backups use customer-managed encryption keys (CMEK) through Cloud KMS rather than default Google-managed encryption.
Updated Rules
The following rule updates may affect your checks and compliance scores:
AWS
-
EKS-001: EKS Cluster Endpoint Public Access: Updated to ensure that AWS EKS cluster endpoint access is not public and prone to security risks.
-
EKS-006: Enable Support for Network Policies: Updated to ensure that EKS clusters are using network policies for proper segmentation and security.
-
EKS-008: Ensure EKS Clusters Are Created with Private Nodes: Updated to ensure that Amazon EKS cluster nodes are configured with private IP addresses only, without public IP addresses assigned.
