turbot/alicloud_compliance

Control: 5.2 Ensure that there are no publicly accessible objects in storage buckets

Description

It is recommended that storage object ACL should not grant public access.

Remediation

From Console

  1. Logon to OSS console.
  2. In the bucket-list pane, click on a target OSS bucket.
  3. Click on Files in top middle of the console.
  4. Hover on More in the right column on a target object.
  5. Click Set ACL.
  6. Click Private.
  7. Click Save.

Usage

steampipe check alicloud_compliance.control.cis_v100_5_2

SQL

This control uses a named query:

manual_control

Tags