Ensure Access to Fusion is restricted via Access Control List (ACL)

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Sign in to the Oracle Cloud Infrastructure Console with the appropriate administrator privileges 2. Navigate to the Fusion SaaS environment's network settings and locate the Access Control List configuration 3. Verify that ACLs are enabled for the environment 4. Confirm that the ACL contains only trusted public IP addresses, CIDR ranges, or OCI Virtual Cloud Networks (VCNs) 5. Check that the allowlist excludes overly broad ranges such as 0.0.0.0/0 6.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. In the Oracle Cloud Infrastructure Console, access the Fusion SaaS environment's network configuration 2. Enable the Access Control List feature if not already active 3. Add the organization's trusted public IP addresses, CIDR ranges, and/or OCI Virtual Cloud Networks (VCNs) to the ACL 4. Save the configuration and confirm that the ACL is enforced 5. Remove any broad or unnecessary ranges that could allow access from untrusted sources 6. Document any exceptions that must remain open, including justification and approval 7. Validate the changes by testing access from both allowed and disallowed networks to ensure enforcement is functioning as expected