Data at risk

Alicloud OSS Bucket without Access Logging

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks
  • CIS Alibaba Cloud Foundation Benchmark

Description

Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are stored in containers called buckets. It was detected that the OSS bucket {AlicloudOssBucket} does not have logging enabled. Logging generates a log that contains access records for each request made to your OSS bucket. By enabling OSS bucket logging on target OSS buckets, it is possible to capture all events which may affect objects within a target bucket.
  • Recommend icon

    Recommended Mitigation

    It is recommended to enable logging for buckets to track the access of objects in them. For more information on how to configure logging see: <a href="https://www.alibabacloud.com/help/doc-detail/31900.html" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/doc-detail/31900.html</a>