Control: 5.3 Ensure that logging is enabled for OSS buckets

Description

OSS Bucket Access Logging generates a log that contains access records for each request made to your OSS bucket. An access log record contains details about the request, such as the request type, the resources specified in the request worked, and the time and date the request was processed. It is recommended that bucket access logging be enabled on the OSS bucket.

Remediation

From Console

Perform the following to enable OSS bucket logging:

1. Logon to OSS console.
2. In the bucket-list pane, click on a target OSS bucket.
3. Under Log, click Configure.
4. Configure bucket logging.
5. Click the Enabled checkbox.
6. Select Target Bucket from list.
7. Enter a Target Prefix.
8. Click Save.