Control: 5.2 Ensure that there are no publicly accessible objects in storage buckets

Description

A bucket is a container used to store objects in Object Storage Service (OSS). All objects in OSS are stored in buckets.

It is recommended that storage object ACL should not grant public access.

Remediation

Using the Management Console:

Logon to OSS console.
In the bucket-list pane, click on a target OSS bucket.
Click on Files in top middle of the console.
Hover on More in the right column on a target object.
Click Set ACL.
Click Private.
Click Save.

Default Value:

By default, object ACLs are inherited from corresponding bucket ACL.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v200_5_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v200_5_2 --share

SQL

This control uses a named query:

select
  'arn:acs:::' || account_id as resource,
  'info' as status,
  'Manual verification required.' as reason
  , account_id as account_id
from
  alicloud_account;