TMA-IBMCLOUD-2.1.5

Ensure Public (anonymous) Access to IBM Cloud Object Storage buckets is Disabled

ÉlevéeNiveau 1Revue manuelleibmcloud

Description

You can disable public (anonymous) access to IBM Cloud Object Storage buckets. Buckets might have to hold open data sets for academic, research, or image repositories that are used by web applications and content delivery networks. You can make these buckets publicly accessible by using the Public Access group. But when buckets contain non-public data (e.g., restricted, internal, confidential or sensitive data), it is important to have public access disabled. To disable the public access, a previously defined access policy must be removed. By default, public access to Cloud Object Storage buckets is disabled. If an access policy is defined that allows public access, you can disable the policy by using the console.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To check if an access policy exists for a Cloud Object Storage bucket, you can list the access policies for the Public Access group. Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Access groups. 4. Select Public Access 5. Check the list of access polices to see if one exists for the relevant Cloud Object Storage bucket.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To disable public access for buckets, complete the following steps: Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Access groups. 4. Click Public Access to see a list of all public access policies currently in use. 5. Find the policy that corresponds to the bucket that you want to return to enforced access control. 6. From the list of actions, select Remove. 7. Confirm that you want to remove the policy.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: access-controlcloudibmcloud
Référence: CIS IBM Cloud Foundations Benchmark v2.0.0 - 2.1.5 Ensure Public (anonymous) Access to IBM Cloud Object Storage buckets is Disabled