Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Severity : HighMedium

Description: This control ensures that OCI Object Storage buckets are protected against unintended and malicious deletion by unauthorized groups and users . Regular users/groups for the buckets and its objects must be configured with least privilege to only specific objects or buckets. Also access policies for non-privilege users and groups should remove add statements for permission for OBJECT-DELETE or BUCKET_DELETE with statement request.permission != {OBJECT_DELETE, BUCKET_DELETE}.

...