Creating a Custom Compliance Policy in Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Organizational policies may require excluding certain control sets from the default compliance management pack. This article outlines the steps to create and apply a custom compliance policy in Aria Operations.

Environment

VMware Aria Operations 8.x

Resolution

Follow the below steps to create and apply a custom compliance policy:

1. Create a new Custom Policy or use an existing policy. Below are the steps to create a new custom policy:

• Navigate to Operations > Configurations > Policy Definition.

• Click 'Add' to create a new policy.

• In the Create Policies workspace, provide a clear name and description that reflects the purpose of the policy.

• From the 'Inherit From' drop-down, select an existing policy to use as a baseline.

• Click 'Create' Policy.

2. Configure a new custom alert that includes the required symptoms for the compliance benchmark, by setting the Alert Type and Subtype to 'Appliance: Compliance'. Follow the steps outlined in the documentation: Creating Alert Definitions

3. Create a new custom benchmark by following the documentation: Create a New Custom Benchmark

NOTE: To select the custom alert configured, choose defined by 'user'.

4. Assign the Newly created policy to the objects on which you need to apply custom compliance policy by following the documentation: Assigning Policies