Alibaba Cloud
TMA-ALIBABA-5.5
Ensure that the shared URL signature expires within an hour
Descrição
Expire the shared URL signature within an hour. URL signature is a URL that grants access rights to OSS. You can add signature information to a URL so that you can forward the URL to the third party for authorized access. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
Como é verificado
Método de auditoria: Revisão manual
Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click Files in top middle of the console 4. Click View Details in the right column on a target object 5. Ensure Validity Period is set to less than 3600
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Set Validity Period to a value less than 3600
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- alibabaoss
- Referência
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 5.5 Ensure that the shared URL signature expires within an hour