Ensure OSS Bucket Public Access is Disabled
Access control lists (ACLs) are used to control access to Object Storage Service (OSS) buckets and objects stored in OSS buckets. After a request is sent to access data stored in OSS, OSS checks the ACL of the data and verifies whether the requester has required permissions. You can configure the ACL of a bucket when you create the bucket. You can also modify the ACL of an existing bucket based on your requirements. Only the owner of a bucket can configure or modify the ACL of the bucket.
Risk Level: high
Platform: Alicloud
Spectral Rule ID: TFALCLD021
REMEDIATION
set acl
to 'private'
- acl = "public-read"
+ acl = "private"
Read more:
Updated about 1 year ago