Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Severity : null

Description : Object store buckets can be configured to allow anyone, regardless of whether they are an Oracle cloud user or not, to write objects to a bucket or delete objects. This option should not be configured unless there is a strong business requirement.

Remediation Steps : Disable global all users policies on all object store buckets and ensure the bucket is configured with the least privileges.