Ensure OCI Object Storage bucket can emit object events

Error: OCI Object Storage bucket does not emit object events
Bridgecrew Policy ID: BC_OCI_STORAGE_3
Checkov Check ID: CKV_OCI_7
Severity: HIGH

OCI Object Storage bucket does not emit object events

Description

This policy identifies the OCI Object Storage buckets that are disabled with object events emission. Monitoring and alerting on object events of bucket objects will help in identifying changes bucket objects. It is recommended that buckets should be enabled to emit object events.

Fix - Runtime

OCI Console

  1. Login to the OCI Console
  2. Type the resource reported in the alert into the Search box at the top of the Console.
  3. Click the resource reported in the alert from the Resources submenu
  4. Next to Emit Object Events, click Edit.
  5. In the dialog box, select EMIT OBJECT EVENTS (to enable).
  6. Click Save Changes.

Fix - Buildtime

Terraform

  • Resource: oci_objectstorage_bucket
  • Arguments: agent_config.is_monitoring_disabled
resource "oci_objectstorage_bucket" "pass" {
  ...
  object_events_enabled = true
...
}