Control: 5.5 Ensure that the shared URL signature expires within an hour
Description
Expire the shared URL signature within an hour.
Remediation
Through the management console:
- Logon to OSS console.
- In the bucket-list pane, click on a target OSS bucket.
- Click on
Filesin top middle of the console. - Click on
View Detailsin the right column on a target object. - Set
Validity Periodto a valueless than 3600.
Default Value:
300 seconds.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v200_5_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v200_5_5 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;