Skip to content

Latest commit

 

History

History
18 lines (13 loc) · 899 Bytes

pre-authenticated-requests-access.md

File metadata and controls

18 lines (13 loc) · 899 Bytes

CloudSploit

ORACLE / Object Store / Pre-Authenticated Requests Access

Quick Info

Plugin Title Pre-Authenticated Requests Access
Cloud ORACLE
Category Object Store
Description Ensure that Pre-Authenticated Requests have least privilege access.
More Info PreAuthenticated requests allow for users who are not in the tenancy to access buckets, ensuring least access prevents malicious entities from leveraging this type of access to edit or delete objects in a bucket.
ORACLE Link https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm
Recommended Action When creating Pre-Authenticated Requests, ensure only ObjectRead permissions are selected.

Detailed Remediation Steps