Control: 4.1.3 Ensure Versioning is Enabled for Object Storage Buckets

Description

A bucket is a logical container for storing objects. Object versioning is enabled at the bucket level and is disabled by default upon creation. Versioning directs Object Storage to automatically create an object version each time a new object is uploaded, an existing object is overwritten, or when an object is deleted. You can enable object versioning at bucket creation time or later.

Remediation

From Console

1. Login to OCI Console.
2. Select Object Storage from the Services menu.
3. Select Object Storage from the Object Storage menu.
4. Click on an individual bucket under the Name heading.
5. Ensure that the Object Versioning is not set to Enabled.
6. Repeat for each compartment.
7. For each bucket in the returned results, click the Bucket Display Name.
8. Click Edit next to Object Versioning: Disabled.
9. Click Enable Versioning.

From Command Line

1. Executethefollowingcommand:

for region in `oci iam region list | jq -r '.data[] | .name'`;
  do
  for compid in `oci iam compartment list --compartment-id-in-subtree TRUE 2>/dev/null | jq -r '.data[] | .id'`
    do
    for bkt in `oci os bucket list --compartment-id $compid --region$region 2>/dev/null | jq -r '.data[] | .name'`
      do
      output=`oci os bucket get --bucket-name $bkt --region $region 2>/dev/null | jq -r '.data | select(."versioning" == "Disabled").name'`
      if [ ! -z "$output" ]; then echo $output; fi
      done
    done
  done

2. Ensure no results are returned.
3. For each of the buckets identified get the bucket name

oci os bucket update --bucket-name <bucket name> --versioning Enabled