Benchmark: 5 Storage

Usage

Browse dashboards and select 5 Storage:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check alicloud_compliance.benchmark.cis_v100_5

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share alicloud_compliance.benchmark.cis_v100_5

Controls

• 5.1 Ensure that OSS bucket is not anonymously or publicly accessible
• 5.2 Ensure that there are no publicly accessible objects in storage buckets
• 5.3 Ensure that logging is enabled for OSS buckets
• 5.4 Ensure that 'Secure transfer required' is set to 'Enabled'
• 5.5 Ensure that the shared URL signature expires within an hour
• 5.6 Ensure that URL signature is allowed only over https
• 5.8 Ensure server-side encryption is set to 'Encrypt with Service Key'
• 5.9 Ensure server-side encryption is set to 'Encrypt with BYOK'

Tags