Alibaba Cloud
TMA-ALIBABA-5.6
Ensure that URL signature is allowed only over https
Mô tả
URL signature is a URL that grants access rights to OSS. You can add signature information to a URL so that you can forward the URL to the third party for authorized access.A URL signature can be provided to the third party for authorized access. It is recommended to allow such access requests over HTTPS protocol only. URL signature should be allowed only over HTTPS protocol. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Using the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Ensure HTTPS is set to Enabled
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Using the management console: 1. Logon to OSS console. 2. In the bucket-list pane, click on a target OSS bucket 3. Click on Files in top middle of the console 4. Click on View Details in the right column on a target object 5. Set HTTPS to Enabled
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- alibabaoss
- Tham chiếu
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 5.6 Ensure that URL signature is allowed only over https