Plugin Title | Pre-Authenticated Requests Access |
Cloud | ORACLE |
Category | Object Store |
Description | Ensure that Pre-Authenticated Requests have least privilege access. |
More Info | PreAuthenticated requests allow for users who are not in the tenancy to access buckets, ensuring least access prevents malicious entities from leveraging this type of access to edit or delete objects in a bucket. |
ORACLE Link | https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm |
Recommended Action | When creating Pre-Authenticated Requests, ensure only ObjectRead permissions are selected. |