Query: 2.2 Ensure the OSS used to store ActionTrail logs is not publicly accessible

Description

ActionTrail logs a record of every API call made in your Alibaba Cloud account. These logs file are stored in an OSS bucket. It is recommended that the access control list (ACL) of the OSS bucket, which ActionTrail logs to, shall prevent public access to the ActionTrail logs.

Query

Tables used in this query:

• alicloud_action_trail
• alicloud_oss_bucket

Controls using this query:

• 2.2 Ensure the OSS used to store ActionTrail logs is not publicly accessible

SQL