OCI Object Storage bucket does not emit object events misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_7
Category - Subcategory	Storage - Alerting
Provider	ORACLE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

This rule identifies the OCI Object Storage buckets that are disabled with object events emission. Monitoring and alerting on object events of bucket objects will help in identifying changes bucket objects. It is recommended that buckets should be enabled to emit object events.

How to Fix

Resource: oci_objectstorage_bucket

• Arguments: agent_config.is_monitoring_disabled [source,go]

---

resource "oci_objectstorage_bucket" "pass" { ... object_events_enabled = true ... }