Plugin Title | File Storage Policy Protection |
Cloud | ORACLE |
Category | File Storage |
Description | Ensure Policy statements have deletion protection for File Storage Services unless it is an administrator group. |
More Info | Adding deletion protection to Oracle File Storage policies mitigates unintended deletion of File Storage Services by unauthorized users or groups. |
ORACLE Link | https://docs.cloud.oracle.com/iaas/Content/Security/Reference/dbaas_security.htm |
Recommended Action | When writing policies, avoid blanket statements, and add a where statement with the line request.permission != {FILE_SYSTEM_DELETE, MOUNT_TARGET_DELETE, EXPORT_SET_DELETE} . |