OSS bucket has static website

This product is not supported for your selected Datadog site. ().
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

Id: 2b13c6ff-b87a-484d-86fd-21ef6e97d426

Cloud Provider: Alicloud

Platform: Terraform

Severity: High

Category: Insecure Configurations

Learn More

Description

Checks whether any static websites are hosted on OSS buckets by detecting the website attribute in alicloud_oss_bucket resources. Buckets with the website attribute are flagged, as static website hosting may lead to unintended public exposure or accidental content hosting. The rule reports an IncorrectValue when website is present. Be aware of any website configurations in use.

Compliant Code Examples

resource "alicloud_oss_bucket" "bucket-acl1" {
  bucket = "bucket-1-acl"
  acl    = "private"
}

Non-Compliant Code Examples

resource "alicloud_oss_bucket" "bucket-website1" {
  bucket = "bucket-1-website"

  website {
    index_document = "index.html"
    error_document = "error.html"
  }
}