Data protection

OSS Bucket doesn’t enforce HTTPS

Description

Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are stored in containers called buckets. It was detected that the OSS bucket {AliCloudOssBucket} is not enforcing HTTPS connections to the bucket, which can result in accepting insecure connections.
  • Recommended Mitigation

    It is recommended to enforce HTTPS connections by accepting only HTTPS connections.