Control: 5.3 Ensure that logging is enabled for OSS buckets


OSS Bucket Access Logging generates a log that contains access records for each request made to your OSS bucket. An access log record contains details about the request, such as the request type, the resources specified in the request worked, and the time and date the request was processed. It is recommended that bucket access logging be enabled on the OSS bucket.


From Console

Perform the following to enable OSS bucket logging:

  1. Logon to OSS console.
  2. In the bucket-list pane, click on a target OSS bucket.
  3. Under Log, click Configure.
  4. Configure bucket logging.
  5. Click the Enabled checkbox.
  6. Select Target Bucket from list.
  7. Enter a Target Prefix.
  8. Click Save.


Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_5_3

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_5_3 --share


This control uses a named query: