Ensure that the shared URL signature expires within an hour

MittelStufe 1Manuelle Prüfungalibaba

Beschreibung

Expire the shared URL signature within an hour. URL signature is a URL that grants access rights to OSS. You can add signature information to a URL so that you can forward the URL to the third party for authorized access. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click Files in top middle of the console 4. Click View Details in the right column on a target object 5. Ensure Validity Period is set to less than 3600

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Set Validity Period to a value less than 3600

Eigenschaften

Betriebssysteme: Beliebig
Tags: alibabaoss
Referenz: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 5.5 Ensure that the shared URL signature expires within an hour