Ensure that the shared URL signature expires within an hour

СреднийУровень 1Ручная проверкаalibaba

Описание

Expire the shared URL signature within an hour. URL signature is a URL that grants access rights to OSS. You can add signature information to a URL so that you can forward the URL to the third party for authorized access. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click Files in top middle of the console 4. Click View Details in the right column on a target object 5. Ensure Validity Period is set to less than 3600

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Set Validity Period to a value less than 3600

Свойства

Операционные системы: Любая
Теги: alibabaoss
Источник: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 5.5 Ensure that the shared URL signature expires within an hour