Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Severity : null

Description : Adding deletion protection to Oracle block volume policies mitigates unintended deletion of block and boot volumes by unauthorized users or groups.

Remediation Steps : When writing policies, avoid blanket statements, and add a where statement with the line request.permission != {VOLUME_DELETE, VOLUME_BACKUP_DELETE, VOLUME_ATTACHMENT_DELETE}.