Ensure network access for Cloud Object Storage is restricted to specific IP range

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

To verify that an IBM Cloud Object Storage bucket is accessible only from authorized IP addresses, administrators can navigate to Permissions tab available under your bucket information and check the Context-base restrictions rule set. Using Console 1. Navigate to IBM Cloud Console: https://cloud.ibm.com/resources. 2. Under Storage click on the Cloud Object Storage instance to verify (users will be directed to a default bucket listing page) 3. Click on the Cloud Object Storage bucket name to review the bucket information. 4. At the bucket information screen, click on the Permissions tab in bucket description on the right navigation pane. 5. Within Bucket access policies you will see a list of policies that can be used to control access to the bucket, choose Context-based restrictions 6. If no Context-based restriction exists, one can be created using the Create rule button following directions in the public documentation here: https://cloud.ibm.com/docs/account?topic=account-context-restrictions- create&interface=ui. 7. If Context-based restrictions exist, users can view the rules by following the Manage context-based restrictions link in the interface. 8. Review the rules to en...

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Follow the steps outlined to add an IP to the list of Authorized IPs in context restriction rules. Using Console From the IBM Cloud console dashboard, you can restrict access to your content by setting a context-based restriction. Set a list of authorized IP addresses 1. Start by selecting Storage to view your resource list. 2. Next, select the service instance with the target bucket from within the Storage menu. The Object Storage Console will be displayed. 3. Select the bucket to navigate to the bucket details interface. 4. Select Permissions from the navigation menu. 5. Select the Context-based restrictions tab. 6. Click on Create rule and follow the instructions here: https://cloud.ibm.com/docs/account?topic=account-context-restrictions- create&interface=ui Note that all objects in this bucket are only accessible from those IP addresses.