Ensure Access to Fusion is restricted via Access Control List (ACL)

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

1. Sign in to the Oracle Cloud Infrastructure Console with the appropriate administrator privileges 2. Navigate to the Fusion SaaS environment's network settings and locate the Access Control List configuration 3. Verify that ACLs are enabled for the environment 4. Confirm that the ACL contains only trusted public IP addresses, CIDR ranges, or OCI Virtual Cloud Networks (VCNs) 5. Check that the allowlist excludes overly broad ranges such as 0.0.0.0/0 6.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

1. In the Oracle Cloud Infrastructure Console, access the Fusion SaaS environment's network configuration 2. Enable the Access Control List feature if not already active 3. Add the organization's trusted public IP addresses, CIDR ranges, and/or OCI Virtual Cloud Networks (VCNs) to the ACL 4. Save the configuration and confirm that the ACL is enforced 5. Remove any broad or unnecessary ranges that could allow access from untrusted sources 6. Document any exceptions that must remain open, including justification and approval 7. Validate the changes by testing access from both allowed and disallowed networks to ensure enforcement is functioning as expected