OCI Object Storage bucket is publicly accessible misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_10
Category - Subcategory	Storage - Permissions
Provider	ORACLE
Severity	HIGH
Framework	Terraform, Terraform Plan

Impact

This rule identifies the OCI Object Storage buckets that are publicly accessible. Monitoring and alerting on publicly accessible buckets will help in identifying changes to the security posture and thus reduces risk for sensitive data being leaked. It is recommended that no bucket be publicly accessible.

How to Fix

Resource: oci_objectstorage_bucket

• Arguments: access_type [source,go]

---

resource "oci_objectstorage_bucket" "pass2" { ... access_type = "NoPublicAccess" ... }