TMAegisБета
Више правила за alibaba

Alibaba Cloud

TMA-ALIBABA-5.5

Ensure that the shared URL signature expires within an hour

СредњаНиво 1Ручни прегледalibaba

Опис

Expire the shared URL signature within an hour. URL signature is a URL that grants access rights to OSS. You can add signature information to a URL so that you can forward the URL to the third party for authorized access. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click Files in top middle of the console 4. Click View Details in the right column on a target object 5. Ensure Validity Period is set to less than 3600

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Through the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Set Validity Period to a value less than 3600

Својства

Оперативни системи
Било који
Ознаке
alibabaoss
Референца
CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 5.5 Ensure that the shared URL signature expires within an hour