Description

Log Service is a real-time data logging service that supports collection, consumption, shipping, search, and analysis of logs. It was detected that log monitoring and alarm are not set up for OSS bucket policy changes. Monitoring OSS bucket policy changes may reduce the time required to detect and correct permissive policies on sensitive OSS buckets.

• 

  Recommended Mitigation

  It is recommended to set up an alarm in the central project, that will alert on OSS bucket policy changes. The suggested query is written in this alert's query. For information about alert configuring: <a href="https://www.alibabacloud.com/help/en/log-service/latest/configure-an-alert-in-log-service" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/en/log-service/latest/configure-an-alert-in-log-service</a>