Control: 2.1.5 Disable public (anonymous) access to IBM Cloud Object Storage buckets
Description
You can disable public (anonymous) access to IBM Cloud Object Storage buckets.
Remediation
From Console
To disable public access for buckets, complete the following steps:
- Log in to IBM Cloud.
- From the Menu bar, click Manage > Access (IAM).
- Click Access groups.
- Click Public Access to see a list of all public access policies currently in use.
- Find the policy that corresponds to the bucket that you want to return to enforced access control.
- From the list of actions, select Remove.
- Confirm that you want to remove the policy. The policy is removed from the bucket.
Usage
Run the control in your terminal:
powerpipe control run ibm_compliance.control.cis_v100_2_1_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run ibm_compliance.control.cis_v100_2_1_5 --shareSQL
This control uses a named query:
iam_access_group_with_public_access