Aqua CSPM

Pre-Authenticated Requests Access

Quick Info

Plugin TitlePre-Authenticated Requests Access
CloudORACLE
CategoryObject Store
DescriptionEnsure that pre-authenticated requests have least privilege access.
More InfoPre-authenticated requests allow for users who are not in the tenancy to access buckets, ensuring least access prevents malicious entities from leveraging this type of access to edit or delete objects in a bucket.
ORACLE Linkhttps://docs.cloud.oracle.com/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm
Recommended ActionWhen creating pre-authenticated Requests, ensure only object read permissions are selected.

Detailed Remediation Steps