turbot/alicloud_compliance

Control: 5.6 Ensure that URL signature is allowed only over https

Description

URL signature should be allowed only over HTTPS protocol.

Remediation

From Console

  1. Logon to OSS console.
  2. In the bucket-list pane, click on a target OSS bucket.
  3. Click on Files in top middle of the console.
  4. Click on View Details in the right column on a target object.
  5. Set HTTPS to Enabled.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_5_6

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_5_6 --share

SQL

This control uses a named query:

manual_control

Tags