Control: 5.6 Ensure that URL signature is allowed only over https
Description
URL signature should be allowed only over HTTPS protocol.
Remediation
From Console
- Logon to OSS console.
- In the bucket-list pane, click on a target OSS bucket.
- Click on
Filesin top middle of the console. - Click on
View Detailsin the right column on a target object. - Set
HTTPStoEnabled.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_5_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_5_6 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;