Ensure OCI Object Storage has versioning enabled
Error: OCI Object Storage Bucket has object Versioning disabled
Bridgecrew Policy ID: BC_OCI_STORAGE_4
Checkov Check ID: CKV_OCI_8
Severity: HIGH
OCI Object Storage Bucket has object Versioning disabled
Description
This policy identifies the OCI Object Storage buckets that are not configured with a Object Versioning. It is recommended that Object Storage buckets should be configured with Object Versioning to minimize data loss because of inadvertent deletes by an authorized user or malicious deletes.
Fix - Runtime
OCI Console
- Login to the OCI Console
- Type the resource reported in the alert into the Search box at the top of the Console.
- Click the resource reported in the alert from the Resources submenu
- Next to Object Versioning, click Edit.
- In the dialog box, Clink Enable Versioing (to enable).
Fix - Buildtime
Terraform
- Resource: oci_objectstorage_bucket
- Arguments: versioning
resource "oci_objectstorage_bucket" "pass" {
...
versioning = "Enabled"
}
Updated 6 months ago