turbot/oci_compliance

Query: objectstorage_bucket_public_access_blocked

Usage

powerpipe query oci_compliance.query.objectstorage_bucket_public_access_blocked

SQL

select
a.id as resource,
case
when public_access_type like 'Object%' then 'alarm'
else 'ok'
end as status,
case
when public_access_type like 'Object%' then a.title || ' publicly accessible.'
else a.title || ' not publicly accessible.'
end as reason,
a.region as region,
a.tenant_name as tenant,
coalesce(c.name, 'root') as compartment
from
oci_objectstorage_bucket as a
left join oci_identity_compartment as c on c.id = a.compartment_id;

Controls

The query is being used by the following controls: