TMA-IBMCLOUD-2.1.5
Ensure Public (anonymous) Access to IBM Cloud Object Storage buckets is Disabled
Deskripsi
You can disable public (anonymous) access to IBM Cloud Object Storage buckets. Buckets might have to hold open data sets for academic, research, or image repositories that are used by web applications and content delivery networks. You can make these buckets publicly accessible by using the Public Access group. But when buckets contain non-public data (e.g., restricted, internal, confidential or sensitive data), it is important to have public access disabled. To disable the public access, a previously defined access policy must be removed. By default, public access to Cloud Object Storage buckets is disabled. If an access policy is defined that allows public access, you can disable the policy by using the console.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
To check if an access policy exists for a Cloud Object Storage bucket, you can list the access policies for the Public Access group. Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Access groups. 4. Select Public Access 5. Check the list of access polices to see if one exists for the relevant Cloud Object Storage bucket.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
To disable public access for buckets, complete the following steps: Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Access groups. 4. Click Public Access to see a list of all public access policies currently in use. 5. Find the policy that corresponds to the bucket that you want to return to enforced access control. 6. From the list of actions, select Remove. 7. Confirm that you want to remove the policy.
Properti
- Sistem operasi
- Apa saja
- Tag
- access-controlcloudibmcloud
- Referensi
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 2.1.5 Ensure Public (anonymous) Access to IBM Cloud Object Storage buckets is Disabled