Data protection

File Storage System is not encrypted with a customer-managed key (CMK)

Risk Level

Informational (4)

  • N/A

Compliance Frameworks


Oracle Cloud Infrastructure File Storage Service (FSS) provides a durable, scalable, secure, enterprise-grade network File System. By default, the Oracle service manages the keys that encrypt FSS File Systems. FSS File Systems can also be encrypted using a customer-managed key (CMK) to create an additional level of security. It was detected that the File System {OciFileSystem.Name} is not encrypted with a customer-managed key. Management of encryption keys is critical to protecting and accessing protected data.
  • Recommended Mitigation

    It is recommended to encrypt FSS File Systems with a customer-managed key (CMK) in order to provide an additional level of security for your data.