Ensure OCI Object Storage has versioning enabled

Error: OCI Object Storage Bucket has object Versioning disabled
Bridgecrew Policy ID: BC_OCI_STORAGE_4
Checkov Check ID: CKV_OCI_8
Severity: HIGH

OCI Object Storage Bucket has object Versioning disabled

Description

This policy identifies the OCI Object Storage buckets that are not configured with a Object Versioning. It is recommended that Object Storage buckets should be configured with Object Versioning to minimize data loss because of inadvertent deletes by an authorized user or malicious deletes.

Fix - Runtime

OCI Console

  1. Login to the OCI Console
  2. Type the resource reported in the alert into the Search box at the top of the Console.
  3. Click the resource reported in the alert from the Resources submenu
  4. Next to Object Versioning, click Edit.
  5. In the dialog box, Clink Enable Versioing (to enable).

Fix - Buildtime

Terraform

  • Resource: oci_objectstorage_bucket
  • Arguments: versioning
resource "oci_objectstorage_bucket" "pass" {
  ...

  versioning = "Enabled"
}