OSS Bucket allows public internet access - Complete Cloud Security in Minutes - Orca Security

Data protection

OSS Bucket allows public internet access

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AliCloud CIS

Description

Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are stored in containers called buckets. It was detected that the OSS bucket {AliCloudOssBucket} allows public access. Accepting public access may allow anyone on the internet to access your bucket.

Recommended Mitigation

It is recommended to restrict the IP range to a specific IP address or IP range. For more information about policy conditions: https://www.alibabacloud.com/help/en/doc-detail/85111.html

See Orca in action

See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.